- 10-12 years of experience in Product Security, Application Security, Security Engineering, or Security Architecture.

- Hands-on expertise in Threat Modeling, Secure Architecture Reviews, Secure SDLC, Secure Code Reviews, and Vulnerability Management.

- Solid knowledge of SAST, DAST, SCA, API Security Testing, WAFs, and DevSecOps/CI-CD Security.

- Experience securing applications in Azure, with working knowledge of AWS and GCP in multi-cloud environments.

- Ability to work directly with development teams to remediate security risks at the architecture, configuration, and code levels.

- Expertise in Web, Mobile, API, Cloud, Container, Microservices, Serverless, and Legacy Application Security.

- Knowledge of OAuth 2.0, OpenID Connect, SAML, Zero Trust, IAM, Encryption, Key & Secrets Management.

- Familiarity with security tools such as Snyk, GitHub Advanced Security, Burp Suite, Qualys, Wiz, Azure DevOps, and GitHub.

- Understanding of OWASP Top 10, OWASP API Security Top 10, CWE Top 25, and AI/LLM Security.

- Relevant certifications preferred: CISSP, CSSLP, CCSP, SABSA, TOGAF, or Cloud Security Certifications.

📌 Product Security Lead, Security Architecture (Bengaluru)
🏢 Insight Global
📍 Bengaluru