Job Title: SECURITY ARCHITECT L1
City: Hyderabad
State/Province: Telangana
Posting Start Date: 7/31/26
Wipro Limited (NYSE: WIT, BSE: 507685, NSE: WIPRO) is a leading technology services and consulting company focused on building innovative solutions that address clients’ most complex digital transformation needs. Leveraging our holistic portfolio of capabilities in consulting, design, engineering, and operations, we help clients realize their boldest ambitions and build future-ready, sustainable businesses. With over 230,000 employees and business partners across 65 countries, we deliver on the promise of helping our customers, colleagues, and communities thrive in an ever-changing world. For additional information, visit us at www.wipro.com.
Job Title: Application Security Operation - Lead
Role Summary
Lead the execution and optimization of enterprise Application Security testing services, including SAST, SCA, Secrets Detection, and DAST. Drive secure SDLC adoption through CI/CD integration, vulnerability validation, risk-based remediation tracking, SBOM management, and security metrics reporting.
Key Responsibilities
Perform continuous and incremental application security testing using SAST, SCA, Secrets Detection, and DAST tools.
Validate findings, eliminate false positives, and support vulnerability remediation activities.
Integrate security scanning into CI/CD pipelines and enforce secure development gates.
Manage SBOM generation, open-source dependency risks, CVE tracking, and vulnerability exposure reporting.
Track remediation SLAs, TTD/TTR metrics, and application security KPIs.
Partner with development, DevSecOps, and platform engineering teams to drive remediation and continuous security improvements.
Support security assessments, tool optimization, reporting, and developer enablement initiatives.
Review the report before publishing and lead the report readout meetings with the stakeholders
Provide guidance and Technical governance to the team members
Experience
10 years of experience in Application Security, Secure SDLC, or DevSecOps.
Experience in Team management
Hands-on experience operating enterprise AppSec scanning platforms and vulnerability management processes.
Experience integrating security testing into CI/CD pipelines and cloud-native environments.
Strong understanding of OWASP Top 10, secure coding practices, and software supply chain security.
Technical Skills & Tool Experience
SAST: Checkmarx/Veracode/Fortify/ SonarQube/ GitHub Advanced Security.
SCA & SBOM: Fortify/ Checkmarx / Snyk / Black Duck.
DAST & API Security: Fortify/ Checkmarx/ Burp Suite/ Invicti/ Acunetix.
Secrets Detection: GitGuardian/ GitHub Secret Scanning.
DevSecOps: Azure DevOps/ GitHub Actions/ Jenkins/ GitLab CI/CD.
Container & Cloud Security: Prisma Cloud/ Wiz/ Aqua/ Microsoft Defender for Cloud.
Reporting & ITSM: ServiceNow/ Power BI/ Grafana
Preferred Certifications
CEH/Security+/Certified DevSecOps Professional/AWS/Azure Security Specialty
͏
Do
1. Design and develop enterprise cyber security strategy and architecture
a. Understand security requirements by evaluating business strategies and conducting system security vulnerability and risk analyses
b. Identify risks associated with business processes, operations,
information security programs and technology projects
c. Identify and communicate current and emerging security threats and design security architecture elements to mitigate threats as they emerge
d. Identify security design gaps in existing and proposed architectures and recommend changes or enhancements
e. Provide product best fit analysis to ensure end to end security covering different faucets of architecture e.g. Layered security, Zoning, Integration aspects, API, Endpoint security, Data security, Compliance and regulations
f. Demonstrate experience in doing security assessment against NIST Frameworks, SANS, CIS, etc.
g. Provide support during technical deployment, configuration, integration and administration of security technologies
h. Demonstrate experience around ITIL or Key process-oriented domains like incident management, configuration management, change management, problem management etc.
i. Provide assistance for disaster recovery in the event of any security breaches, attacks, intrusions and unusual, unauthorized or illegal activity
j. Provide solution of RFPâÃÂÃÂs received from clients and ensure overall design assurance
͏
i. Develop a direction to manage the portfolio of to-be-solutions including systems, shared infrastructure services, applications, hardware related to cyber risk security in order to better match business outcome objectives
ii. Analyse technology environment, enterprise specifics, client requirements to set a collaboration design framework/ architecture
iii. Depending on the clientâÃÂÃÂs need with particular standards and technology stacks create complete RFPs
iv. Provide technical leadership to the design, development and implementation of custom solutions through thoughtful use of modern technology
v. Define and understand current state solutions and identify improvements, options & tradeoffs to define target state solutions
vi. Clearly articulate and sell architectural targets, recommendations and reusable patterns and accordingly propose investment roadmaps
vii. Evaluate and recommend solutions to integrate with overall technology ecosystem
viii. Tracks industry and application trends and relates these to planning current and future IT needs
͏
2. Stakeholder coordination & audit assistance
a. Liaise with stakeholders in relation to cyber security issues and provide timely support and future recommendations
b. Provide assistance in maintaining an information security risk register and help with internal and external audits relating to information security
c. Support audit of security best practices and implementation of security principles across the organization, to meet business goals along with customer and regulatory requirements
d. Assist with the creation, maintenance and delivery of cyber security awareness training to team members and customers
e. Provide training to employees on issues such as spam and unwanted or malicious emails
͏
Deliver
No Performance Parameter Measure
1 Customer centricity Timely security breach solutioning to end users, Internal stakeholders & external customers experience, CSAT, educating and suggesting right control to the customers.
2 Support sales team to create wins % of proposals with Quality Index >7, timely support of the proposals, identifying opportunities/ leads to sell services within/ outside account (lead generation), no. of proposals led
Mandatory Skills: Application Security Code Review - SAC .
Experience: 8-10 Years .
Reinvent your world. We are building a modern Wipro. We are an end-to-end digital transformation partner with the boldest ambitions. To realize them, we need people inspired by reinvention. Of yourself, your career, and your skills. We want to see the constant evolution of our business and our industry. It has always been in our DNA - as the world around us changes, so do we. Join a business powered by purpose and a place that empowers you to design your own reinvention.
