Key Responsibilities
Design, implement, and maintain secure architectures across on-premises and cloud environments (AWS, Azure, GCP).
Conduct advanced penetration testing , red teaming , and vulnerability assessments on applications, networks, and systems.
Review and harden system configurations, identity \& access management, and network segmentation models.
Develop threat models and define security architecture blueprints aligned with enterprise risk frameworks.
Provide expert guidance on remediation of vulnerabilities and coordinate with system owners and developers.
Integrate security into the SDLC and DevSecOps pipelines; recommend secure coding and deployment practices.
Support incident response teams in identifying root causes and developing post-incident improvements.
Evaluate and select appropriate security tools, frameworks, and technologies to strengthen enterprise defense.
Conduct technical security reviews for third-party solutions and new technologies.
Mentor security engineers and penetration testers; establish security testing methodologies and standards.
Required Skills \& Qualifications
Bachelor’s degree in Computer Science, Information Security, or related discipline.
Minimum 8+ years of experience in cybersecurity, including 3+ years in security architecture and penetration testing .
Proven hands-on expertise in:
Penetration testing tools: Burp Suite, Metasploit, Nmap, Nessus, Kali Linux, etc.
Security frameworks: NIST, ISO 27001, CIS, MITRE ATT\&CK.
Scripting languages: Python, PowerShell, or Bash.
Cloud security controls for AWS / Azure / GCP.
Deep understanding of network security, application security, encryption, IAM, and threat modeling .
Strong communication and documentation skills for presenting technical findings to stakeholders.
Certification:
Mandatory: OSCP (Offensive Security Certified Professional)
Preferred: CISSP, CISM, CEH, or AWS Security Specialty
Preferred Experience
Prior experience in security architecture consulting , red teaming , or offensive security assessments .
Exposure to container security (Docker, Kubernetes) and cloud-native application protection .
Knowledge of SIEM/SOAR integration and automation workflows.
Experience in designing Zero Trust and Defense-in-Depth architectures.
Soft Skills
Analytical mindset with the ability to think like an attacker and architect like a defender.
Excellent stakeholder management and presentation skills.
Strong problem-solving and critical-thinking abilities.
Ability to work independently and collaboratively across diverse teams.