Roles and Responsibilities

- Subject Matter Expert for Application, Product and Platform Security and define the security blueprint.

- Collaborate with Business Analysts, Solution Architects, and Software Development Managers to embed security controls into the non-functional requirements, system design, development and during implementation.

- Partner with Business Analysts to translate compliance and business needs into security requirements.

- Evaluate Solution Architecture designs for security flaws and gaps.

- Define security architecture blueprints, patterns, and frameworks.

- Conduct threat modeling workshops during the initial design phases.

- Work alongside SSDLC team to validate that implemented code matches architectural intent.

- Assess third-party libraries, APIs, interconnections and infrastructure for systemic risk.

- Work on architecture & blueprint for Cyber Security solutions.

- Assessing risks and Security, privacy & other relevant compliance requirements mapping for AI and other new technologies and platforms.

- Develop Microservices &
- API security architecture.

- Work on DevSecOps integration and automation with DevOps team.

- Drive implementation and integration new security tools such as SCA, SAST, DAST &

- IAST for application security testing.

- Contribute to review and enhancement of security posture of network, infrastructure and application layers.

- Prepare weekly/monthly service delivery reports and review with BU Head and VH.

- Provide advice on Secure coding best practices.

Conduct Application





Security related trainings for team and developers.

- Face internal and external audits for the scope of service delivery.

- Participate in security risk assessments and audits. Build-up and transfer interdisciplinary knowledge.

- Review of effectiveness of technical security controls and preparing risk dashboards.

- Collaborate with internal and external stakeholders for timely delivery of the assigned engagements/projects.

- Reviewing the status of the projects and taking corrective/preventive measures as approved.

- Provide service delivery inputs to PMO & other relevant systems.

- Provide SME advice on security tool capabilities and configuration adjustments when needed to contain security incidents or block future security attacks.

- Participate in continual improvement and benchmarking activities.

- Contribute to CoE initiatives and other activities delegated by BU Head or Vertical Head.

Job Requirements:

- Excellent written and verbal communication skills in English, high integrity, robust work ethic and ability to empathize with the customer.

- At least 8 years of Cyber Security experience with 3+ years specifically in Security Architecture in large organization, Bank,



or global IT or consulting firm.

- Strong background of Application Security, Secure Software Development Lifecycle (SSDLC).

- Experience in Threat Modelling, Application Architecture Review, Security Architecture Documentation, Security Testing - SCA, SAST &
- DAST.

- Exposure of security tools integration in DevOps architecture.

- Exposure of Microservices security, API security and AI security.

- Exposure implementation of evaluation and implementation of Application Security &

- Testing tools.

- Troubleshooting and problem-solving ability including analytical thinking and strong attention to details.

- Good understanding of Application Security Standards like OWASP, SANS, NIST, MAITRE etc.

- Good understanding of Security by Design and Privacy by Design principles.

- Good understanding of privacy compliance requirements and privacy controls at application and database layers.

- Good understanding of compliance requirements for payment and nonpayment applications.

- Product & platform security assessment exposure is desirable.

- Understanding of Load Balancer, WAF, CDN, API Gateway, Secrets Management etc. is desired.

- Exposure of cloud application (SaaS) security solutions is desirable.

- Good understanding of encryption tools and technologies

- SSL, Keys Management, HSM and PKI infrastructure and secrets management.

- Ability to take assess solution and recommend proactive steps to mitigate Network, OS and Application Layer Security attacks.

📌 Application Security Architect - SSDLC (Navi Mumbai)
🏢 Reserve Bank Information Technology
📍 Navi Mumbai