Application Security Architect, Cybersecurity
HyderabadFull-timeHybrid12–22 yrsPosted over a month ago
Leadership cybersecurity role at Ensemble Health Partners India, in Hyderabad. Needs 12+ years. Hybrid.
About the role
We are looking for a hands-on **Application Security Architect** who combines strong software engineering skills with deep application security expertise. This is a generalist role — you should be comfortable reading and writing production-quality code across multiple languages, and equally comfortable designing and running an AppSec program that spans SAST, DAST, and SCA tooling, secure architecture reviews, and developer enablement.
What you'll do
- Design and drive the application security strategy across the SDLC — from design reviews through CI/CD to production
- Own and continuously tune **SAST** (e.g., Checkmarx, Fortify, Semgrep, CodeQL), **DAST** (e.g., Burp Suite Enterprise, OWASP ZAP, Invicti), and **SCA** (e.g., Snyk
- Perform secure architecture and design reviews for new features, services, and major system changes
- Read, write, and refactor code (not just review it) to build internal tooling, PoCs for vulnerabilities, custom scanners, and secure-by-default libraries/frameworks
- Conduct manual code reviews and threat modeling for high-risk services, complementing automated tooling
What you need
- OWASP
- ISO 27001
- Python
- CI/CD
- Node.js
- C#
Good to have
- Cloud security
- AWS
- GCP
- Docker
- Kubernetes
- Azure