Job Details

- Job Title: Lead Support Analyst
- Country: IN
- City: Mumbai
- Skill Category: ITTechnology

Job Summary

We are seeking a skilled Automation Engineer to join our Information Security team within the Automation AI function. This role combines Python development expertise with contemporary AI application development to drive intelligent automation initiatives across our security operations. The ideal candidate will bring hands-on experience building web applications, APIs, and AI-powered solutions, and security orchestration playbooks while maintaining a solid understanding of cybersecurity principles. You will work at the intersection of security, automation, and AI to transform how our organization approaches information security challenges.

Responsibilities

- Provide application security architecture support to the teams that build and maintain business systems.
- Manage and maintain a library of application security architecture patterns.
- Conduct comprehensive security architecture assessments for applications, systems, and infrastructure.
- Implement secure-by-design principles in solution architecture and development processes.
- Lead application threat modeling (STRIDE/PASTA) for new features, APIs, and microservices, mapping findings to OWASP Top 10 and OWASP ASVS controls.
- Review application designs and code for authentication, authorization, session management, input validation, output encoding, secrets management, and cryptographic implementation weaknesses.
- Design secure API security patterns (OAuth 2.0, OpenID Connect, JWT handling, rate limiting, schema validation) and validate them against abuse and injection scenarios.
- Review and validate security controls in existing and proposed systems.
- Develop security architecture patterns, standards, and guidelines.




- Create detailed architecture diagrams and documentation using visualization tools.
- Collaborate with security engineering teams to integrate security requirements into the software development lifecycle.
- Perform security risk assessments and threat modeling exercises.
- Ensure compliance with industry standards and regulatory requirements.
- Document security architecture decisions and maintain architecture artifacts.
- Support audit activities and compliance reporting.
- Manage security architecture projects and initiatives using Jira for tracking and workflow management.
- Maintain comprehensive documentation in Confluence including security standards, procedures, and knowledge base articles.
- Create and maintain security architecture repositories and knowledge management systems.
- Work closely with cross-functional teams including DevOps, infrastructure, and application development.
- Provide security guidance and recommendations to stakeholders.
- Participate in architecture review boards and security committees.

Knowledge, Skill, Experience Required

- Must have 9-10 years of hands-on experience in cybersecurity domain.
- Proven experience in security architecture assessments and secure-by-design implementations.
- Experience with enterprise security frameworks and methodologies.
- Deep understanding of security architecture principles and frameworks
- Proficiency in threat modelling methodologies (STRIDE, PASTA)
- Deep, hands-on knowledge of the OWASP Top 10, OWASP ASVS, and OWASP SAMP/SAMM maturity practices.
- Robust understanding of secure coding practices across common stacks (e.g., Java, .NET, Python, JavaScript/Node.js) and the ability to review code for security defects.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Lead Support Analyst (Mumbai)
🏢 Nomura
📍 Mumbai