Information Security Architect
Posted Updated
Description
**Job Summary:-**\
We are seeking an experienced Information Security Architect specializing in Threat Modeling to join our dynamic team. The ideal candidate will bring deep technical expertise in cybersecurity, hands-on experience with threat modeling methodologies, and strong communication skills to work on diverse security initiatives across the organization.
\
**Key Responsibilities:-**\
• Conduct comprehensive threat modeling for applications and systems using STRIDE, DREAD, or similar methodologies.\
• Collaborate with development, DevSecOps, and penetration testing teams to identify and mitigate risks.\
• Work closely with engineering teams to integrate security throughout the development lifecycle.\
• Evaluate and enhance the security architecture of cloud, web, and mobile applications.\
• Develop and maintain security documentation, including models, standards, and guidelines.\
• Guide secure design and architecture principles across various projects.\
• Use tools like SD Elements to support threat modeling and secure development practices.\
• Support red-teaming and penetration testing exercises and provide actionable insights.\
• Present findings to technical and non-technical stakeholders clearly and effectively.
\
**Required Qualifications:-**\
• 7–9 years of experience in Information Security with a focus on architecture and threat modeling.\
• CISSP certification is mandatory. Good to have Certification: AZ 500, CCSK, CCSP\
• Strong understanding of secure development practices, DevSecOps, and common SDLC models.\
• Knowledge of penetration testing methodologies and tools.\
• Hands-on experience with application security tools and threat modeling frameworks.\
• Familiarity with SD Elements is a plus.\
• Excellent verbal and written communication skills, with the ability to explain technical issues to diverse audiences.\
• Strong interpersonal skills and a collaborative mindset.
