Par vakanci
Saviynt is hiring a Senior Principal Security Architect focused on cloud and application security. The role covers security architecture across AWS, Azure, and GCP, identity security, application security engineering, DevSecOps, and security governance.
Responsibilities
Define, assess, and evolve cloud security architecture and strategy across AWS, Azure, and GCP environments.
Lead and participate in cloud security architecture reviews, threat modeling sessions, and design assessments.
Analyze and remediate cloud and application security issues, including CSPM and CWPP findings, identity risks, network exposure, vulnerabilities, and compliance gaps.
Work with development teams to design secure systems and remediate security vulnerabilities.
Provide guidance on OWASP Top 10 vulnerabilities and lead remediation efforts.
Design and implement secure authentication and authorization solutions using identity security principles and protocols such as SAML and OAuth 2.0, including production-grade code review and development work.
- Embed security into CI/CD pipelines and deployment workflows.
- Build, review, and improve integrations between CI/CD pipelines, ticketing systems, and SIEM/SOAR platforms.
- Perform technical health checks of cloud environments and DevSecOps pipelines before large-scale or production deployments.
- Prioritize security risks based on business impact and attack paths in partnership with Product Management.
- Create dashboards, metrics, and executive-level reports for security governance.
- Participate in internal and third-party audits, including evidence collection and remediation.
- Lead security discussions with customers, partners, and internal stakeholders.
- Communicate security risks, remediation plans, and architectural decisions to scrum teams and leadership.
Conditions
Hybrid work format in San_Jose.
Salary: $260,000–$275,000 biweekly.
Preferred Qualifications
- Experience supporting regulated environments and participating in internal or third-party audits.
- Cloud security certifications such as AWS, Azure, GCP, CCSK, or CISSP.