Security Lead – Cyber Security (Thiruvananthapuram)

About the role

We are looking for a seasoned Security Lead to own and drive the end‑to‑end security posture across all development pods in our Thiruvananthapuram office. You will shape security governance, architecture, and DevSecOps practices for a fast‑growing cyber‑security product suite.

Key responsibilities

• Define and maintain the security control framework aligned with ISO 27001 and relevant government standards.
• Lead Secure SDLC and DevSecOps initiatives, including SAST/DAST gates, dependency scanning, threat modelling, and CI/CD security controls.
• Own vulnerability management, triage, remediation tracking, and verification of fixes.
• Provide technical direction on IAM, authentication, authorization, cryptography, encryption, key management, HSM/PKI design, and risk assessment.
• Collaborate with Architecture, Engineering, DevOps, QA and development teams to ensure security is embedded in every release.
• Support audits, accreditation processes, and client security assurance activities.

Required profile

• 10+ years of experience in information security, with at least 4 years in a leadership role.
• Bachelor’s degree in Computer Science, IT or a related field.
• CISSP certification (or equivalent seniority) is mandatory; ISO 27001 Lead Auditor/Implementer preferred.
• Additional credentials such as CISM, government or national‑security experience, and HSM/PKI design are advantageous.

Required skills

• ISO 27001
• SAST / DAST
• Secure SDLC
• DevSecOps / CI‑CD security gates
• Threat modelling
• Vulnerability scanning and remediation
• IAM
• Cryptography, encryption, key management
• HSM and PKI design
• Penetration testing
• Risk assessment and treatment planning