Cybersecurity architect

Roles & Responsibilities

• Define and implement enterprise cybersecurity architecture, Strategy across applications, infrastructure, cloud, network, and data domains.

• Align security policies with business objectives and regulatory requirements.

• Conduct security architecture reviews for new systems and enhancements to ensure secure-by-design implementation.

• Lead threat modelling, risk assessments, and security design evaluations for critical business applications.

• Establish and enforce security standards, policies, and frameworks aligned with ISO 27001, NIST, and industry best practices.

• Conducted security assessments and audits of cloud platforms. Identify and mitigate risks, vulnerabilities, and threats

• Design secure cloud infrastructures and applications using best practices (e.g.M365 /Azure Security Best Practices). Architect secure integration between on-premises systems and cloud environments.

• Implementation of cloud security controls (IAM, encryption, network security)

• Provide expertise on Data Security, Application security, DevSecOps, API security, and Secure SDLC practices.

• Oversee identity and access management architecture, including SSO, MFA, privileged access, and Zero Trust principles.

• Collaborate with internal teams and external vendors to ensure secure integration and compliance.

• Working effectively with various technology COEs, Technology Heads, and other resolver groups.

• Advanced Threat Protection & Threat Hunting. Secure Score recommendation

• Support regulatory compliance, audits, and governance requirements.

• Provide technical leadership and advisory to stakeholders on cybersecurity risks and mitigation strategies.

Must Have

• Must have hands-on experience in SIEM & SOAR: Splunk, Microsoft Sentinel

• Must have hands-on experience in XDR & EDR: Cortex XDR, Tanium, Microsoft Defender for Endpoint (MDE)

• Must have hands-on experience in VMDR (Vulnerability Management, Detection & Response): Tenable, Qualys

• Must have hands-on experience in Identity and Access Management (IAM): Microsoft Entra ID, SailPoint

• Must have hands-on experience in Privileged Access Management (PAM): CyberArk

• Must have hands-on experience in Network Security: Palo Alto Networks, Zscaler Internet Access (ZIA)

• Must have hands-on experience in Cloud Security: Microsoft Defender for Cloud (Azure Defender for Cloud), Azure Cloud Security Controls and Monitoring

Good to have

• Good-to-have hands-on experience in Data Loss Prevention (DLP): Microsoft Purview, FortiGate DLP

• Good-to-have hands-on experience in Privileged Access Management (PAM): CyberArk

• Good-to-have hands-on experience in Web Application Firewall (WAF): Azure Web Application Firewall (Azure WAF), Imperva WAF, AWS Shield