Senior Security Architect

Location: Bengaluru

Role Overview

We are seeking a highly strategic and technically proficient Associate Director / Senior Security Architect. In this role, you will act as the core security partner to our Platform Engineering, Dev Ops, and Infrastructure teams, ensuring that security is baked into our ecosystem.

Beyond foundational platform security, you will drive execution across critical enterprise domains: establishing a standardized Perimeter and WAF defense strategy across our major group platforms (including Flipkart, Myntra, Cleartrip, and Super Money), engineering multi-tenant API Gateway architectures , defining modern automated Vulnerability Management frameworks , and building frameworks for securing enterprise AI utilization. This is a high-impact leadership role requiring deep technical execution and the ability to influence cross-functional platform teams.

Key Responsibilities
1. Perimeter Security & WAF Standardization

● Group-Wide WAF Framework:
Standardize and implement an enterprise-grade WAF architecture across multiple environments, ensuring 100% security coverage across all public-facing endpoints.
● Advanced Bot Management:
Deploy and manage an effective Bot Management (BOTM) solution across all public endpoints; architect dynamic and static rate limits and continuously improve bot identification accuracy to eliminate false positives (FPs).

● DDoS Resilience & Simulation:
Orchestrate and oversee monthly DDoS simulations to rigorously test and identify application flaws as well as gaps in the BOTM solution.

2. API Security Architecture

● Gateway-First Architecture:
Partner with the Platform Engineering team to ensure all internal and external APIs are exposed strictly through secure API Gateways.

● Access Control & Rate Limiting:
Architect and enable centralized Authentication & Authorization (AuthN/Z) and dynamic rate-limiting capabilities leveraging multiple parameters (e.g., IP addresses, User IDs, Account IDs).

● Core Protection Capabilities:
Define gateway policies to defend against top web vectors and custom parameter blocking (Client , Account ).

● Discovery & Visibility:
Implement comprehensive API discovery and inventory features , govern TLS version enforcement , and build real-time observability to immediately identify and mitigate API abuse.

3. Vulnerability Management (VM) Transformation

● Centralized Dashboarding:
Establish an enterprise-wide centralized dashboard providing an accurate, single pane of glass for vulnerability monitoring with 100% VM coverage.

● Developer Enablers:
Architect and implement automated patching pipelines to assist developer workflows and streamline remediation.

● SLA Enforcement & Triage:
Standardize vulnerability criticality criteria to eliminate noise and reduce false positives ; drive strict adherence to remediation SLAs.

● Lifecycle & Baseline Governance:
Design End-of-Life (EOL) infrastructure strategies and secure stakeholder buy-in for seamless migration; implement and mandate a  Golden Image  strategy across the Flipkart group.

4. Logging, Monitoring & Modern Initiatives

● Production Logging Strategy:
Architect a resilient production logging strategy capable of handling high-volume ingestion while optimizing storage structures and maintaining strict cost efficiency.

● Securing AI Usage:
Establish security guardrails, architectural governance patterns, and policy frameworks to ensure safe, secure, and compliant adoption of AI technologies across the organization.

● Platform

Collaboration:

Act as the primary technical point of contact to translate security requirements into developer-friendly configurations (Infrastructure-as-Code, CI/CD integrations) for the Platform Engineering team.

5. AI Security

● Strategise the security for AI based assets - LLM,…