Experience &

- Qualifications

- 8-12 years of Cyber Security experience in large organizations, banks, or global IT/consulting firms

- Strong background in Application Security &
- Secure SDLC (SSDLC)

- Experience in:

- Threat Modeling

- Application Security Architecture Review

- Security Testing: SCA, SAST, DAST, IAST

- Exposure to DevSecOps integration and security tools in CI/CD pipelines

- Knowledge of Microservices &

- API Security

- Understanding of Owasp, SANS, NIST security standards

- Familiarity with Security by Design &

- Privacy by Design

- Exposure to Cloud Security (SaaS) and platform security

- Knowledge of Load Balancer, WAF, CDN, API Gateway, Secrets Management

- Strong understanding of encryption technologies (SSL, PKI, HSM, Key Management)

- Solid analytical, troubleshooting, and problem-solving skills

Key Responsibilities

- Act as SME for Application &
- Product Security

- Drive SSDLC implementation across projects end-to-end

- Conduct:

- Architecture Reviews





- Security Testing (SCA, SAST, DAST, IAST)

- Implement and manage application security tools

- Define secure coding practices and conduct developer trainings

- Lead and manage a small Application Security team

- Work on DevSecOps automation and integration

- Perform risk assessments, audits, and compliance reviews

- Prepare risk registers, dashboards, and reports

- Collaborate with internal and external stakeholders

- Provide inputs for product/platform security enhancements

- Drive continuous improvement and CoE initiatives

Certifications (Preferred)

- ISO 27001, cissp, CISA, csslp, CEH

- C|ase, CSSD, GWEB, cmwpt, GPEN

- API Security Architect or equivalent

Employment Details

- Full-time Fixed-Term Contract (5 years)

- Extendable based on mutual consent

- Exclusive to ReBIT

📌 Security Architect For Application Security SSDLC (Mumbai)
🏢 Honeybee Tech Solutions
📍 Mumbai