The Role
Define enterprise security architecture standards, review application, cloud, platform, infrastructure, and network designs, and establish secure-by-design engineering practices. Lead threat modeling, security architecture reviews, secure coding, CI/CD security scanning, vulnerability remediation, cloud security controls, IAM, segmentation, and security baselines across AWS, Azure, hybrid environments, containers, and Kubernetes. Establish security programs, ensure regulatory compliance, and address AI security and governance risks.
Summary Generated by Built In
• Define and maintain enterprise-wide security architecture principles, standards, and best practices.
• Review and approve application, platform, cloud, and infrastructure designs from a security
perspective.
• Establish secure-by-design and secure-by-default engineering practices.
• Develop and maintain security reference architectures, patterns, and reusable controls
• Drive security throughout the Software Development Lifecycle (SDLC).
• Define and implement secure coding standards and security guardrails.
• Lead threat modeling exercises for critical applications and platforms.
• Oversee SAST, DAST, dependency scanning, container scanning, and software supply chain security
initiatives.
• Partner with development teams to remediate vulnerabilities and security findings.
• Review APIs, microservices, authentication mechanisms, and data protection strategies.
• Partner with Infrastructure and Cloud teams to design secure cloud-native architectures.
• Drive implementation of security controls across AWS, Azure, and hybrid environments.
• Review network architecture, IAM, WAF, load balancers, VPNs, firewalls, and segmentation strategies.
• Establish security baselines for servers, containers, Kubernetes clusters, and cloud services.
• Ensure compliance with security policies, standards, and regulatory requirements.
Requirements
• 8–10+ years of experience in Information Security, Security Architecture, Application Security, or Cloud
Security.
• Strong hands-on experience with both Application Security and Infrastructure Security.
• Deep understanding of secure software development practices.
• Experience securing cloud environments such as AWS and/or Azure.
• Experience implementing security controls in CI/CD pipelines.
• Ability to perform threat modeling and security architecture reviews.
• Strong stakeholder management and influencing skills.
• Security certifications such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer,
TOGAF, or equivalent.
• Experience in highly regulated environments.
• Experience establishing security programs within engineering organizations.
• Familiarity with compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, NIST, or CIS Controls.
• Exposure to Generative AI, Large Language Models (LLMs), Agentic AI frameworks, or intelligent
automation platforms.
• Understanding of AI security concepts including model security, prompt injection risks, data
governance, and AI risk management.
• Familiarity with emerging AI governance and security frameworks.
Skills Required
- 8-10+ years of experience in Information Security, Security Architecture, Application Security, or Cloud Security
- Hands-on experience with Application Security and Infrastructure Security
- Deep understanding of secure software development practices
- Experience securing AWS and/or Azure cloud environments
- Experience implementing security controls in CI/CD pipelines
- Ability to perform threat modeling and security architecture reviews
- Strong stakeholder management and influencing skills
- Security certification such as CISSP, CCSP, CSSLP, AWS Security Specialty, Azure Security Engineer, TOGAF, or equivalent
- Experience in highly regulated environments
- Experience establishing security programs within engineering organizations
- Familiarity with ISO 27001, SOC 2, PCI-DSS, NIST, or CIS Controls
- Exposure to Generative AI, Large Language Models, Agentic AI frameworks, or intelligent automation platforms
- Understanding of AI security concepts, including model security, prompt injection risks, data governance, and AI risk management
- Familiarity with emerging AI governance and security frameworks
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Marketscope is a technology company specializing in the development and integration of Advanced Driver Assistance Systems (ADAS) and the scaling of production-grade AI/ML applications. The company focuses on AI platform engineering and product stacks, targeting strategic enterprise accounts and government sales, particularly within the Indian market, while expanding its reach into new international industries.
