Responsibilities

- The Architect shall be capable of not only finding risks/issues but shall also suggest the best route to remediation, knowing the compensatory controls & guiding the product team for its closure.

Qualifications

- Globally recognized Cyber Security Certifications (Advanced/Expert Level).

- 5+ years of full-time information security experience with emphasis on technical assessment (system/web application vulnerability assessment, penetration testing, white box secure code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.

Required Skills

- Mandatory Skills

- Security Engineering

- Firm with knowledge of OWASP, CVSS, FIPS 140-2/140-3 and DoD RMF.

- Sound understanding of security technologies/techniques like:

- Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA),

- Hardware/embedded authentication, OAuth, 2-factor authentication, and
- white-box code analysis.





- Experience with a range of security tools related to:

- SAST (Static Application Security Assessment),

- DAST (Dynamic Application Security Assessment),

- Vulnerability Management,

- SCA (Software Composition Analysis),

- Penetration Testing

- Threat Modelling Tools etc.

- Product Engineering

- Experience in working in a Product sector workplace.

- Knowledge of Cloud Infrastructure [Platform as a Service].

- Security Engineering

- Penetration Testing in Web Applications, Thick Clients, Mobile Applications, REST/SOAP.

- Infrastructure Penetration Testing.

- Experience in Red Teaming Activities (add-on).

- Recognition for CVE or Wall-of-Fame through Bug-Bounty (add-o)

Preferred Skills

- Nice-to-have Skills

- Medical Software/Device Engineering

- MDS2 documentation.

- Experience in the Healthcare domain.

- Standard Software Engineering

- Experience in Micro Services using RESTful frameworks.

📌 Product Security Architect (Bengaluru)
🏢 Staffington Global
📍 Bengaluru