Role: Application Security Architect

- 8-12 years of overall experience in Cybersecurity and Application Security, with at least 4+ years of hands-on experience in application security, security assessments, and security architecture.
- Strong experience performing application security assessments and identifying security risks across web applications, APIs, mobile applications, and enterprise platforms.
- Deep expertise in threat modeling, with the ability to assess systems from an attackers perspective and identify potential attack paths and security weaknesses.
- Strong experience conducting application and security architecture reviews and providing security recommendations during solution design and implementation.
- Strong knowledge of OWASP Top 10, OWASP ASVS, OWASP API Security Top 10, and secure software development principles.
- Experience with attack surface analysis, abuse cases, data-flow analysis, security design reviews, and threat modeling methodologies.
- Strong understanding of common application security vulnerabilities, including broken authentication, broken access control, injection, insecure APIs, session management issues, cryptographic weaknesses, and application misconfigurations.
- Good understanding of penetration testing and red-team methodologies, with a strong attacker mindset; however, this is not a dedicated penetration testing role.
- Hands-on experience with SAST, DAST, SCA, API security tools,



vulnerability scanning, secrets scanning, and other application security testing technologies.
- Strong knowledge of secure application architecture, including authentication, authorization, API security, encryption, secrets management, session management, and secure integration patterns.
- Experience implementing or supporting Secure SDLC and DevSecOps, including the integration of security controls into CI/CD pipelines.
- Strong understanding of modern application environments, including cloud platforms such as AWS and/or Azure, microservices, containers, Kubernetes, and APIs.
- Ability to work closely with development, infrastructure, enterprise architecture, and cybersecurity teams to prioritize and drive remediation of security risks.
- Ability to translate technical security findings into transparent risk assessments, security requirements, architectural recommendations, and remediation roadmaps.
- Strong communication, documentation, and stakeholder management skills, with the ability to independently work as part of a long-term dedicated security team supporting US-based stakeholders.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr. Application Security Architect (Pune)
🏢 systems plus
📍 Pune