Position summary

CARL ZEISS is seeking an experienced Security Architect with 8–10 years of experience to lead, define, and strengthen the security posture of our software products, cloud services, APIs, and digital platforms. In this strategic role, you will act as a trusted advisor to engineering and product management teams, embedding security-by-design, privacy-by-design, and risk-based security architecture early into the product develop-ment lifecycle. You will play a key role in protecting ZEISS’s diverse product portfolio against evolving cyber threats while enabling engineering innovation and rapid speed-to-market.

Primary duties and responsibilities

Key Responsibilities:

- Define and drive the security architecture strategy, secure architecture patterns, and reference designs across ZEISS's product portfolio.
- Partner with solution architects, product management, and engineering teams to embed security and privacy requirements from the earliest design phases.
- Lead threat modeling, architectural risk assessments, and secure design reviews for new and existing products.
- Guide engineering teams on the secure implementation of authentication, authorization, cryptography, key management, and data protection controls.
- Oversee the integration and governance of security tooling (SAST, DAST, IAST, SCA) in auto-mated CI/CD pipelines to drive DevSecOps adoption.
- Evaluate third-party components, open-source libraries, and cloud services for security and supply chain risks.
- Lead remediation of penetration testing findings and support vulnerability management and security assurance programs.
- Provide architectural guidance during security incidents and drive improvements based on lessons learned.
- Translate complex technical risks into clear business terms and report on security posture to senior leadership.
- Mentor engineers, champion a security-first culture,



and maintain high-quality security architecture documentation and best practice guidelines.

Required Qualifications:

- 8–10 years of experience in Product Security, Application Security, Security Architecture, Cloud Security, or DevSecOps.
- Proven track record designing secure architectures for enterprise software products, cloud ap-plications, microservices, and containerized environments.
- Strong knowledge of the Secure Software Development Lifecycle (SSDLC), threat modeling, security architecture reviews, risk assessments, and security-by-design principles.
- Hands-on experience with SAST, DAST, IAST, and SCA tools into CI/CD pipelines, with enter-prise-level use of tools such as Checkmarx, Fortify, Black Duck, Coverity, or Snyk.
- Experience securing cloud environments (AWS, Azure, or GCP), including IAM, data protection, cryptography, PKI, key management, and secure API design.
- Solid understanding of OWASP Top 10, OWASP ASVS, OWASP SAMM, NIST Cybersecurity Framework, ISO/IEC 27001, and secure coding practices.
- Solid stakeholder management and communication skills, with the ability to influence product owners, architects, developers, DevOps teams, and executive leadership.

Preferred Qualifications:

- Bachelor's or Master's degree in Computer Science, Information Security, Engineering, or a related field.
- Industry certifications such as CISSP, CSSLP, OSCP, advanced GIAC, or cloud security certifications.
- Experience securing products in highly regulated industries such as medical technology, healthcare, industrial automation, or manufacturing.
- Experience defining secure architectures for medical devices, connected products, IoT platforms, or embedded hardware-software systems, including familiarity with IEC 62443.
- Experience with AI/LLM security, generative AI risk assessments, and RAG (Retrieval-Augmented Generation) security testing.
- Experience driving secure development practices across multiple business units.

📌 Security Architect (Bengaluru)
🏢 Zeiss India
📍 Bengaluru