Security Architect

TCS is Hiring!!

Role: Security Architect

Experience Range: 8-12 Years

Location: Lucknow, Bangalore, Mumbai, Indore

Role Description

We are seeking a Security Architect responsible for defining, governing, and sustaining a strong enterprise security architecture. The role ensures applications, products, and infrastructure remain secure and fully aligned with business goals, regulatory requirements, and riskmanagement strategies.

Key Responsibilities

Perform SAST and DAST on web, mobile, and API components to identify vulnerabilities.

Conduct manual API penetration testing beyond automated tool capabilities.

Execute Vulnerability Assessments (VA) and Penetration Testing (PT) and deliver clear remediation guidance.

Perform secure code reviews focusing on authentication, input validation, cryptography, and session handling.

Assess application and system architecture to identify security design gaps.

Track and manage risk classification, prioritization, and mitigation followups.

Maintain detailed security testing artifacts including reports, evidence, and retest results.

Collaborate with development teams to integrate secure SDLC practices.

Monitor emerging security threats and recommend control enhancements.

Required Qualifications

Strong background in Information Security Technology, with 7+ years architecting enterprisescale systems or cloud platforms.

Proven experience delivering secure architectures for cloudnative and distributed systems (microservices, containers, Kubernetes, APIs).

Handson expertise in at least two of the following areas:

Cloud Security: Azure, AWS, GCP

Identity & Access Management: SSO, OAuth2/OIDC, SAML, SCIM, PAM, JIT, secrets management (e.g., Vault)

Detection & Response: SIEM, SOAR use cases, EDR/XDR, log engineering, MITRE ATT&CK