Job Title: Information Security Architect
Group: Mercedes-Benz Group AG
Qualifications: A Bachelor's degree in Computer Science, Information Technology, Engineering, Information Security, Cybersecurity, or a related field is required.CISSP or CCSP or CSSLP certification is mandatory.Experience: Minimum of 6-8 years of relevant work experience in cybersecurity architecture, engineering, application security, or a similar field. The candidate must possess the ability to perform threat modeling for applications.Responsibilities: Conduct threat modeling and architectural assessments of applications to encompass all aspects of information security, ensuring security by design.Document identified threats and provide corresponding mitigation strategies.Evaluate technologies and solutions to enhance security capabilities.Identify security gaps and communicate associated business risks to relevant stakeholders.Provide solutions aligned with business needs, considering security and compliance requirements.Verify the effectiveness of security controls in mitigating identified risks.Assist engineering projects throughout the Secure Software Development Life Cycle (SSDLC) and collaborate to effectively prioritize product security elements.Technical Skills: Strong knowledge of information security principles, security architectures, frameworks, standards, and emerging threats, with the ability to implement effective mitigation strategies.Deep understanding of network protocols, operating systems, databases, applied cryptography, least privilege, zero trust principles, identity & access management, and other core information security concepts.Familiarity with regulatory requirements and compliance standards (NIST, ISO 27001, GDPR, SOC2).Expertise in cloud computing and its associated best security practices, covering applications, infrastructure, storage, platforms, and data security.Hands-on experience in performing threat modeling for applications, identifying threats, and suggesting optimal mitigation strategies.Strong understanding of threat modeling methodologies (e.g., STRIDE, DREAD, PASTA).Proficiency in using threat modeling tools (e.g., Microsoft Threat Modeling Tool, Threat Modeler, OWASP Threat Dragon).In-depth knowledge of common security vulnerabilities (e.g., OWASP Top Ten, CVEs) and attack vectors.Must have experience in architecting and securing Cloud Computing Platforms such as Azure or AWS.Demonstrate a deep understanding of Google Cloud Platform (GCP) concepts and architectures, focusing on how security controls are applied to cloud-based technologies, including Architecture & Networking, Identity & Access Management, Securing the CI/CD Pipeline, Secrets and Data Protection, logging and monitoring, and Security controls for Containers (e.g., Dockers, Kubernetes).Excellent communication and interpersonal skills, with the ability to interact with stakeholders at all levels and explain complex security concepts in an easily understandable manner.Good understanding of relevant laws, regulations, and industry standards.
OrganizationMercedes-Benz Research and Development India Private Limited
Primary LocationIndia-Karnataka-Bangalore
Work LocationsBrigade Tech Gardens, Katha No. 119, Kundalahalli Village, K.R. Puram Hobli, Ward No. 85, Bangalore 560037
#J-18808-Ljbffr