Security Architect – Technical Team Lead

Job not on LinkedIn

🔥 0 minutes ago

🇮🇳 India – Remote

💵 ₹2.6M - ₹3.7M / year

⏰ Full Time

🟠 Senior

🔙 Backend Engineer

👻 Ghost score 20%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

PORCH 💚

WebsiteLinkedInAll Job Openings

1 - 10 employees

Founded 2022

💼 Consulting

🏥 Healthcare

🏨 Hospitality

Consulting • Healthcare • Hospitality

PORCH 💚 is a next-generation insurance company that provides comprehensive software and services to various home service industries. It streamlines interactions for home professionals, utility customers, realtors, and homeowners by offering tools for inspections, moving, mortgage processes, and home maintenance. Through its partnerships, Porch enhances the home buying experience by simplifying service requests, onboarding new customers for warranty and insurance companies, and assisting with home improvement projects.

📋 Description

• Define and maintain reference architectures, security patterns, and design standards across cloud, application, network, identity, and data layers • Lead threat modeling for new products, major features, and infrastructure changes • Translate threat-model findings into prioritized engineering work • Serve as security design authority in architecture reviews and document accepted risk • Design identity and access architecture covering SSO/SAML/OIDC, privileged access, service authentication, secrets management, and least privilege • Own SIEM and security data platform architecture, including log onboarding, pipelines, normalization, schemas, retention, and cost discipline • Lead technical investigation, containment, root-cause analysis, postmortems, and systemic fixes for high-severity incidents • Architect data protection controls including encryption, key management, tokenization, classification-driven handling, and data residency • Define secure SDLC architecture with SAST/DAST/SCA, IaC scanning, pipeline guardrails, and policy-as-code • Establish detection and response architecture requirements for logging, telemetry, SIEM data models, and alerting • Evaluate security tooling, run proofs of concept, and own build-vs-buy technical cases • Map architecture to SOC 2, ISO 27001, PCI DSS, GDPR, and India DPDP Act obligations • Maintain the security architecture roadmap and technical debt register • Provide day-to-day technical leadership for the India-based security team

🎯 Requirements

• 10+ years in information security, with 5+ years in a security architecture or senior security engineering role • 3+ years leading technical teams, including mentoring senior engineers • Incident response experience as technical lead on high-severity incidents, including scoping, containment, and postmortem ownership • Hands-on penetration testing experience covering web, API, and cloud penetration tests and report writing • Practical understanding of LLM and agentic system threat models, guardrail design, and AI red teaming • Strong application security depth, including secure code review, OWASP Top 10, API Security Top 10, threat modeling, and secure SDLC integration • Deep hands-on expertise in at least one major cloud platform, plus container/Kubernetes security and infrastructure-as-code • Hands-on SIEM and security operations experience, including data onboarding, parsing, and query authoring • Enterprise-scale identity, network segmentation, or data protection architecture experience • Working fluency with at least two compliance frameworks and experience designing auditable controls • Scripting/automation capability in Python, Go, or equivalent • Track record of influencing engineering teams without direct authority • Strong written communication for design documents, risk narratives, and penetration test reports • Proven experience working with US-based business teams • Ability to work within core US business hours/time zone expectations, with Eastern Standard Time overlap • Quiet, dedicated workspace and reliable internet connection with minimum speed of 50 Mbps • Preferred: AI-assisted penetration testing experience • Preferred: Offensive security certifications such as OSCP, OSWE, OSEP, GPEN, or GWAPT • Preferred: Architecture certifications such as CISSP, CCSP, SABSA, or cloud-specific architect credentials • Preferred: AI security credentials or contributions • Preferred: Experience in a distributed, multi-region organization with significant India engineering presence • Preferred: STRIDE or PASTA threat modeling and zero-trust architecture implementation

🏖️ Benefits

• Medical insurance • Accident insurance • Retiral benefits • 12 company-paid holidays • 2 flexible holidays • Privilege/earned leave • Casual/sick leave • Paid maternity and paternity leaves • Weekly wellness events