Sr. Specialist Cybersecurity Architect

About the role

AT&T's Chief Security Office is looking for a Sr. Specialist Cybersecurity Architect in Bengaluru or Hyderabad. The role ensures the technical feasibility and successful delivery of secure technology solutions, leads agile development, manages technical risks and provides expert technical guidance while balancing agility with quality through effective security protocols. It suits someone with a strong technical background and 8+ years of experience leading large cross-organizational cybersecurity projects.

Key responsibilities

• Architect, design and deliver large-scale, reliable, maintainable cybersecurity solutions aligned with company guidelines and best practices.
• Maintain documentation and patterns for cybersecurity design, implementation and maintenance, ensuring compliance with regulatory standards and internal policies.
• Work with cybersecurity subject matter experts to solve difficult problems and drive enterprise-wide security architecture initiatives aligned with Enterprise Architecture principles.
• Lead threat modeling for applications, platforms, APIs and cloud-native solutions to identify and mitigate risks.
• Provide guidance and mentorship to Senior Engineers, lead technical discussions and make architectural decisions.
• Model technology solutions by translating cybersecurity needs and business constraints into working designs.

Required profile

• 8+ years of experience in cybersecurity architecture and related fields.
• Bachelor's degree in Computer Science, Information Systems or a related field preferred.
• Experience in Agile/Scrum/Kanban teams, leadership across business units and clear communication of complex technical topics.
• Flexibility to cover US morning hours when needed.

Required skills

• Hands-on experience securing Microsoft Azure, AWS and/or GCP.
• Threat modeling (STRIDE, PASTA or equivalent).
• OWASP Top 10, security-by-design and security design patterns.
• Zero Trust, DevSecOps, Kubernetes/Container Security, API Security, CI/CD Security, CSPM and IaC security.
• Familiarity with NIST, ISO 27001, SOC2, PCI-DSS and GDPR; AI/ML use in security is a plus.
• Certifications such as CISSP, CCSP, TOGAF, SABSA, Azure Security Engineer Associate, AWS Security Specialty or Google Professional Cloud Security Engineer are highly desirable.