Principal Application & Product Architect
Wolters Kluwer4 days ago
Pune, IndiaStaff+
Responsibilities
- Guide, mentor, and align Portfolio Security Leads and Security Champions across the ATHIP division.
- Serve as the primary application security SME, providing expert guidance, incident support, and escalation for security issues.
- Oversee threat modeling, security scanning, security reviews, and timely vulnerability remediation.
- Coordinate AppSec training and ensure Security Champions and PSLs are enabled to perform their roles.
- Provide quarterly AppSec briefings to the ATHIP CTO and prepare monthly AppSec reports.
- Collaborate with Global Information Security on NIST attestation, incident management, and exception filing.
- Drive integration of security controls into CI/CD pipelines, including SAST, SCA, DAST, container scanning, and IaC checks.
- Validate and enforce ASVS-based security requirements across ATHIP services and applications.
- Collaborate with product managers, architects, Privacy Champions, and other centers of excellence to balance security and privacy requirements.
- Contribute to AppSec strategy programs involving metrics, tool deployment, ASVS remediation, SBOM, and software supply-chain management.
Requirements
- Bachelor’s degree required.
- 12+ years of experience in application/product security, software engineering, or related roles.
- GIAC GSEC, CISSP, or equivalent baseline certification plus a vendor-neutral Secure SDLC/AppSec certification such as CSSLP preferred.
- Demonstrated success leading cross-functional security initiatives and improving operational workflows.
- Experience managing or indirectly influencing others in a matrixed or project-based environment.
- Proficiency in one or more of Java, Python, C#, or JavaScript.
- Hands-on experience with SAST, SCA, DAST, IaC scanning, and container/runtime scanning tools.
- Experience embedding security checks into CI/CD platforms such as GitHub Actions, GitLab CI, Jenkins, Azure DevOps, or Bitbucket.
- Understanding of security capabilities in at least one major cloud provider: AWS, Azure, or GCP.
- Strong business acumen, secure product strategy understanding, communication skills, and ability to translate strategy into operational execution.
- Internal candidates must be familiar with Wolters Kluwer security policies and standards; familiarity with ATHIP products is preferred.
Tech Stack
Categories
About Wolters Kluwer
Wolters Kluwer builds subscription software, data, and workflow solutions for professionals in healthcare, tax and accounting, legal and regulatory, finance and compliance, and ESG. Its portfolio spans SaaS applications and expert content that support compliance, decision-making, and operational processes. Founded in 1836 and headquartered in Alphen aan den Rijn, the Netherlands, it is publicly traded on Euronext Amsterdam (WKL) and reported 2025 annual revenue of €6.1 billion.