Secure Development Lifecycle (SDL) / Cybersecurity Architect

About the role

AVEVA is seeking a senior Cybersecurity Architect to lead the Secure Development Lifecycle (SDL) across its product portfolio. Based in Hyderabad, the role will work in a hybrid setting, partnering with engineering, product, legal and compliance teams to embed security by design.

Key responsibilities

• Define and institutionalize a Secure SDLC framework for all AVEVA solutions.
• Embed security controls throughout design, development, testing, deployment and maintenance.
• Conduct threat modeling, secure code reviews and static analysis.
• Own security architecture for applications, APIs, cloud workloads and supporting platforms.
• Develop reference architectures for cloud, on‑prem, IoT and hybrid environments.
• Lead Zero Trust, identity, encryption and data‑protection strategies.
• Prepare compliance artifacts, support regulatory audits and ensure “secure‑by‑default” configurations.

Required profile

• 8‑12 years of experience in software development (.Net, Web, Cloud) and cybersecurity.
• Proven track record in security architecture and application/product security.
• Deep knowledge of Secure Development Lifecycle frameworks in agile/DevOps.
• Familiarity with EU Cyber Resilience Act and industry standards (ISO 27001, NIST, IEC 62443).

Required skills

• .Net, Web, Cloud development
• Secure Development Lifecycle, static code analysis tools
• Threat modeling (STRIDE, attack trees)
• Security design reviews, secure coding practices
• Cloud security (AWS, Azure, GCP)
• OWASP Top 10, API security, OAuth2/OIDC, SSO, RBAC/ABAC
• Fuzz testing, penetration testing
• Secure API practices (input validation, rate limiting, secure headers)
• Zero Trust, identity, encryption, data protection

What we offer

• Full‑time permanent position with hybrid work model.
• Opportunity to shape security strategy for a global industrial software leader.
• Access to cutting‑edge technologies and continuous learning.