2 months ago
Hyderābād, IndiaStaff+
Responsibilities
- Define and drive adoption of secure design patterns, reference architectures, policies, standards, and secure coding practices for product and application development.
- Perform architecture and design reviews for web applications, APIs, microservices, distributed systems, and cloud-native applications.
- Integrate application security controls, including SAST, DAST, SCA, secret scanning, and IaC/PaC/SaC controls, into SDLC, CI/CD pipelines, and developer workflows.
- Partner with product and engineering teams to provide architectural guidance, risk insight, and design feedback throughout the Value Creation Process.
- Coordinate integration of security services into internally and externally facing solutions and manage remediation of product and application security gaps.
- Maintain awareness of product, application, and cloud architectures in relation to threats, regulatory requirements, compliance, and business risk.
- Contribute to security policies, standards, and guidelines; research leading practices; and recommend process and control improvements through automation and developer enablement.
- Communicate security project and issue status to security, technology, engineering, and executive leadership.
Requirements
- Bachelor’s degree in computer engineering, cybersecurity, or a related field; a master’s degree is preferred.
- Typically 12+ years of related experience, including at least 6 years in security, 3 years in a defensive application security role working directly with software engineering teams, and 3 years as a security architect.
- Experience designing and reviewing secure application and API architectures.
- Experience implementing application security tooling, including SAST, DAST, SCA, API security, and secrets management.
- Experience integrating security into CI/CD pipelines and developer workflows.
- Experience with cloud-native application architectures such as microservices and Kubernetes as they relate to application security.
- Experience presenting to and influencing engineering leadership and executives, and collaborating across globally distributed teams.
- Practical knowledge of NIST CSF, CIS Critical Security Controls v8, OWASP SAMM, OWASP ASVS, OWASP Top 10, and the MITRE ATT&CK framework.
- Knowledge of identity, authentication, authorization, secure API design, risk management, and balancing security with business outcomes.
- At least one application security or secure development certification, such as CSSLP, GWEB, or CASE.
- Cloud or Kubernetes security certification, such as CKS, CCSK, CCSP, or GCSA, is preferred.
- General security certification, such as CISSP or GIAC, and security architecture certification, such as SABSA SCF or ISSAP, are preferred.
Benefits
- 100% in-office work environment.
- Master’s degree and cloud, Kubernetes, general security, and security architecture certifications are preferred.
- TriNet is an equal opportunity employer and provides reasonable accommodations during the application process.
Tech Stack
Categories
About TriNet
TriNet is a public HR services provider for small and midsize businesses, offering PEO-based, full‑service outsourcing that bundles payroll, employee benefits, compliance, and risk management with cloud HR software. The company is headquartered in Dublin, California, and trades on the NYSE under the ticker TNET. It serves customers nationwide with industry-tailored solutions, combining human capital expertise and technology to simplify HR operations for SMBs.