Responsibilities
The Architect shall be capable of not only finding risks/issues but shall also suggest the best route to remediation, knowing the compensatory controls & guiding the product team for its closure.

Qualifications
Globally recognized Cyber Security Certifications (Advanced/Expert Level).
5+ years of full time information security experience with emphasis on technical assessment (system/web application vulnerability assessment, penetration testing, white box secure code analysis, etc.) and security architecture (design of security controls, secure system design, understanding of identity and authentication management, etc.

Required Skills
Mandatory Skills
Security Engineering
Firm with knowledge of OWASP, CVSS, FIPS 140-2/140-3 and DoD RMF.
Sound understanding of security technologies/techniques like:
Cryptography, Algorithms, Public key Infrastructure (PKI) Certificate Authority (CA),
Hardware/embedded authentication, OAuth, 2-factor authentication, and
white-box code analysis.




Experience with a range of security tools related to:
SAST (Static Application Security Assessment),
DAST (Agile Application Security Assessment),
Vulnerability Management,
SCA (Software Composition Analysis),
Penetration Testing
Threat Modelling Tools etc.
Product Engineering
Experience in working in a Product sector workplace.
Knowledge of Cloud Infrastructure [Platform as a Service].
Security Engineering
Penetration Testing in Web Applications, Thick Clients, Mobile Applications, REST/SOAP.
Infrastructure Penetration Testing.
Experience in Red Teaming Activities (add-on).
Recognition for CVE or Wall-of-Fame through Bug-Bounty (add-o)

Preferred Skills
Nice-to-have Skills
Medical Software/Device Engineering
MDS2 documentation.
Experience in the Healthcare domain.
Standard Software Engineering
Experience in Micro Services using RESTful frameworks.

📌 Product Security Architect Bengaluru
🏢 Staffington Global
📍 Bengaluru