DTICI_ISA_T7 (1318)

Tasks

We are seeking a technically strong and hands-on Information Security Architect to drive security design, threat modeling, and architecture reviews across multiple projects. The ideal candidate will support teams with technical security requirements, document risks using SD Elements, and align architectural decisions with security best practices and frameworks.

While this role does not directly involve conducting Vulnerability Assessment and Penetration Testing (VAPT), prior experience in these areas is essential to understand potential risks and recommend effective security controls.

- Design and review secure system and application architectures. - Conduct and support threat modeling and risk assessment activities. - Identify and document attack surfaces and potential vulnerabilities during design reviews. - Act as a security advisor to project and architecture teams throughout the development lifecycle. - Capture and manage technical security observations in SD Elements, ensuring traceability and remediation tracking. - Engage with stakeholders across development, architecture, and infrastructure teams to embed security into solution design. - Align solutions with enterprise architecture frameworks (e.g., TOGAF, SABSA) and internal security policies. - Participate in architecture review boards and security governance forums. - Support secure design validation for cloud, on-prem, and hybrid environments.

Qualifications

- 9 to 12 years of experience in information security or architecture-related roles. - CISSP Certification is a MUST. - Strong background in application security, secure development lifecycle, and architecture design. - Hands-on experience in threat modeling and understanding of attack surfaces. - Past experience in VAPT execution and remediation handling (even though not part of the current responsibilities). - Experience using SD Elements for security requirements and issue tracking is mandatory. - Proficient in architecture frameworks such as TOGAF, SABSA, or NIST. - Good knowledge of cloud security (preferably Azure) and secure DevOps practices. - Excellent communication skills to collaborate with global stakeholders and technical teams.