Position : Application Security Risk Architect
Experience : 7- 9 Years
Location : Bangalore, India
Job Summary :
We're looking for a skilled and proactive Application Security Risk Architect with 7- 9 years of experience to join our team. The ideal candidate will have a primary focus on threat modeling and security architecture reviews.
You will lead the effort to identify and mitigate security risks across our application portfolio, from design to deployment. This role requires a strong understanding of secure application design, expertise with threat modeling frameworks, and the ability to embed security into the core of our development processes.
Key Responsibilities :
Threat Modeling & Security Architecture Reviews :
- Lead and conduct threat modeling sessions using industry-standard frameworks like STRIDE, PASTA, and LINDDUN.
- Perform security architecture reviews for new and existing applications, including web, mobile, APIs, and cloud-native services.
- Analyze data flow diagrams, trust boundaries, and third-party integrations to identify potential attack vectors.
- Collaborate with solution architects to integrate secure design principles and zero-trust models into all architectures.
Application Security & Vulnerability Management :
Conduct secure design and code assessments for critical applications.Support the SAST (Static Application Security Testing) program, using tools like Checkmarx, Fortify, or SonarQube, and prioritize findings based on design flaws.Partner with development teams to guide the remediation of vulnerabilities with secure design patterns.Governance, Awareness & Developer Support :
Define and document secure design guidelines and best practices for development teams.Provide training and mentorship on threat modeling and secure architecture principles to foster a security-aware culture.Create security playbooks, checklists, and documentation to standardize the architecture security review process.Required Skills & Qualifications :
Core Experience :
7- 9 years of experience in Application Security or Secure Software Architecture.At least 5 years of experience with a primary focus on Threat Modeling and Architecture Security Reviews.Technical Proficiency :
Strong knowledge of secure application design principles : authentication, authorization, data protection, and API security.Experience with threat modeling tools like the Microsoft Threat Modeling Tool or manual frameworks like STRIDE.Hands-on experience with SAST tools (Checkmarx, Fortify, SonarQube) and secure coding standards (OWASP, CWE).Familiarity with cloud security principles across AWS, Azure, and GCP.Preferred Qualifications :
Experience integrating secure design practices into Agile and DevOps CI / CD pipelines.Knowledge of compliance frameworks like OWASP ASVS, NIST 800-53, ISO 27001, and PCI DSS.Relevant security certifications, such as CSSLP, SABSA, CISSP, or AWS Security Specialty.Exposure to DAST (Dynamic Application Security Testing), SCA (Software Composition Analysis), container security, or penetration testing methodologies.Additional Information :
Candidates must be available for a Face-to-Face Interview at the IBM location as required.Day 1 Onsite Reporting is mandatory post the date of joining.(ref : hirist.tech)