Security Architect

Job Title: Security Operations Support

Location: Remote

Client: Ford

Experience: 10+

Salary: 30 - 35 LPA

Essential Job Functions:

Security Operations Support

• Application Security Testing, both manually and with security assessment products

** Record security deviancies and work with developers in providing guidance and recommendations/standards to address them

• Perform Traditional Vulnerability Management and Hardening reviews for systems

* Respond to Security Events

Job Summary:

Deep technical knowledge of the OWASP Top 10, Cloud Security Posture Management (CSPM), CVSS scoring, and software supply chain security.

Lead DevSecOps Advocacy and Training: Provide clear guidance to Engineering and Product teams to foster a culture of shared security responsibility

Embed Security into CI/CD Pipelines: Partner with DevOps teams to integrate "shift-left" controls, quality gates, and automated security testing (SAST/SCA/IaC) into actions,

Build DevSecOps Dashboards and Reporting: Develop executive-level KPIs/KRIs covering vulnerability aging, MTTR (Mean Time to Remediate), pipeline pass/fail rates, and measurable risk reduction across the enterprise

Own software supply chain security (SCA): Utilize JFrog Xray for policy enforcement, including vulnerable dependency detection, license governance, and automated blocking of malicious components within the artifact repository.

Drive Static Analysis (SAST) and Code Quality: Use SonarQube to partner with development teams, reducing critical/high findings and implementing sustainable coding standards that are integrated directly into the developer's IDE and pull request workflow.

Conduct Dynamic Testing (DAST): Coordinate testing using Burp Suite to validate exploitability and reproduce issues, while working to automate baseline DAST scans within the CI/CD pipeline.

Lead the end-to-end vulnerability lifecycle: discovery, triage, risk assessment, prioritization, remediation tracking, validation, and closure across Azure cloud environments.

Operate and optimize Microsoft Defender for Cloud (Azure Defender) and Defender fo Endpoint: Improve cloud security posture, reduce misconfigurations, and drive remediation across compute, networking, storage, identity, and container workloads (AKS/OCR).

{}Infrastructure-as-Code (IaC) security : D{}efining and enforcing policies for Terraform, ARM templates, or Bicep