Security Architect & India Technical Team Lead

Overview

Lead Porch's security architecture and serve as technical team lead for the India-based information security team, protecting cloud workloads, identities, networks and data.

What you'll do

• Define and maintain reference architectures, security patterns and design standards for cloud (AWS/Azure/GCP), application, network, identity and data layers.
• Lead threat modeling for new products, major features and infrastructure changes; translate findings into prioritized, actionable engineering work.
• Serve as security design authority in architecture reviews, approving, rejecting or conditioning designs, and document accepted risk with clear owners and expiry dates.
• Design identity and access architecture: SSO/SAML/OIDC, privileged access, service-to-service authentication, secrets management and least-privilege models.
• Own the architecture of the SIEM and security data platform, including log source onboarding, data pipeline and normalization, schema standards, retention tiers and cost-per-GB discipline.
• Serve as senior technical escalation for high-severity and significant incidents: lead investigation, scope compromise, direct containment, lead root cause analysis and own the technical postmortem and systemic fixes.
• Architect data protection controls: encryption at rest and in transit, key management, tokenization, classification-driven handling and data residency requirements.
• Define secure SDLC architecture: SAST/DAST/SCA integration, IaC scanning, pipeline guardrails and policy-as-code enforcement.
• Establish detection and response architecture requirements: logging standards, telemetry coverage, SIEM data model and alerting expectations for new systems.
• Evaluate and select security tooling; run proofs of concept, define success criteria and own the technical case for build-vs-buy decisions.
• Map architecture to compliance obligations (SOC 2, ISO 27001, PCI DSS, GDPR, India DPDP Act) and design controls that satisfy multiple frameworks with one implementation.
• Maintain the security architecture roadmap and technical debt register; sequence remediation against business risk rather than tool findings.
• Provide day-to-day technical leadership for the India-based security team.

What you'll need

• 10+ years in information security, with 5+ years in a security architecture or senior security engineering role.
• 3+ years leading technical teams (formal or matrixed), including mentoring senior engineers.
• Incident response experience as technical lead on high-severity incidents, including scoping, containment and postmortem ownership.
• Demonstrated hands-on penetration testing experience: have personally scoped and executed web, API and cloud pen tests and written the reports, not just managed vendors.
• Fluency in AI security: practical, current understanding of LLM and agentic system threat models, guardrail design and AI red teaming, backed by real work.
• Strong application security depth: secure code review, OWASP Top 10 and API Security Top 10, threat modeling and secure SDLC integration.
• Deep hands-on expertise in at least one major cloud platform, plus container/Kubernetes security and infrastructure-as-code.
• Hands-on experience with SIEM and security operations, including data onboarding, parsing and query authoring, not just dashboard consumption.
• Demonstrated ownership of enterprise-scale identity, network segmentation or data protection architecture.
• Working fluency with at least two compliance frameworks and experience designing controls that hold up under audit.
• Scripting/automation capability (Python, Go, or equivalent) sufficient to build tooling, write exploits and validate controls independently.
• Track record of influencing engineering teams without direct authority; strong written communication for design docs, risk narratives and pen test reports.
• Proven experience working with US based business teams.
• Ability to work within core US business hours, with Eastern Standard Time (EST) overlap.

Nice to have

• Experience using AI to facilitate penetration testing: LLM-assisted recon, payload generation, finding triage or agentic offensive tooling.
• Offensive security certifications: OSCP, OSWE, OSEP, GPEN, GWAPT, or equivalent demonstrated capability.
• Architecture certifications: CISSP, CCSP, SABSA, or cloud-specific architect credentials.
• AI security credentials or contributions: OWASP LLM Top 10 involvement, published AI red team research, CTF or bug bounty results against AI systems.
• Experience in a distributed, multi-region organization with a significant India engineering presence.
• Background in threat modeling methodologies (STRIDE, PASTA) and zero-trust architecture implementation.

Details

• Location: India; fully remote.
• Working hours: 8 hours excluding breaks, including 4 core US hours overlap (7:30pm to 11:30pm IST) and 4 flexible hours (IST).
• Workspace: a quiet, dedicated space and a reliable internet connection with a minimum speed of 50 Mbps.