--- title: Sr. Consultant – Security Architecture Review+App Sec / Compliance description: Sr. Consultant – Security Architecture Review+App Sec / Compliance --- [![Aujas Logo-1](https://www.aujas.com/hs-fs/hubfs/Aujas%20Logo-1.webp?width=951&name=Aujas%20Logo-1.webp "Aujas Logo-1")](https://www.aujas.com/) - Services - [Identity and Access Management](https://www.aujas.com/robotics-iam-identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [Privileged Identity Management Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) - [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Technology Automation](https://www.aujas.com/grc-technology-automation-services) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) - [Security Verification](https://www.aujas.com/security-verification-services) - [On-Demand Security Assessment](https://www.aujas.com/on-demand-security-testing-and-services) - [Breach & Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [IoT Security Assessment](https://www.aujas.com/internet-of-things-security-assessment) - [Red Teaming](https://www.aujas.com/red-teaming-services) - [Integrated Security Assurance Program](https://www.aujas.com/isap) - [DDoS Simulation](https://www.aujas.com/ddos-attack-simulation-services) - [DevSecOps](https://www.aujas.com/devsecops) - [API Security](https://www.aujas.com/api-security) - [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Software Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) - [Registered Device Management Platform](https://www.aujas.com/registered-device-management-platform) - [Managed Detection and Response](https://www.aujas.com/managed-detection-and-response-services) - [Offensive Security Services](https://www.aujas.com/offensive-security-services) - [OT Security Services](https://www.aujas.com/ot-security-services) - [Microsoft Sentinel](https://www.aujas.com/sentinel) - [Threat Management](https://www.aujas.com/threat-management-service) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) - [Cloud Security](https://www.aujas.com/cloud-computing-security-services) - [AWS Cloud Security Services](https://www.aujas.com/aws-cloud-security-services) - [Cloud Security Foundation](https://www.aujas.com/cloud-security-foundation) - [Cloud Risk Management](https://www.aujas.com/cloud-risk-management) - [Cloud Security Engineering](https://www.aujas.com/cloud-security-engineering) - Products - [PALM](https://www.aujas.com/platform-for-access-lifecycle-management) - [Saksham](https://saksham.aujas.com) - [CodeSign](https://codesign.aujas.com) - [Aadhaar Registered Device Manager](https://www.aujas.com/registered-device-management-platform) - Company - [About us](https://www.aujas.com/about-us) - [Investor Relations](https://www.aujas.com/investor-relations) - [Team](https://www.aujas.com/team) - [Partnership](https://www.aujas.com/partnership) - [Contact us](https://www.aujas.com/contact-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Studies](https://www.aujas.com/case-study) - [Contact Sales](https://www.aujas.com/contact-us) - ![](https://www.aujas.com/hubfs/Aujas%202020/blue-search.png) ![blue-search](https://www.aujas.com/hubfs/Aujas%202020/blue-search.png "blue-search") ![Aujas Cybersecurity Logo 2024](https://www.aujas.com/hubfs/Aujas%20Cybersecurity%20Logo%202024.webp "Aujas Cybersecurity Logo 2024") - Services - [Identity and Access Management](https://www.aujas.com/robotics-iam-identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [Privileged Identity Management Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) - [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Technology Automation](https://www.aujas.com/grc-technology-automation-services) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) - [Security Verification](https://www.aujas.com/security-verification-services) - [On-Demand Security Assessment](https://www.aujas.com/on-demand-security-testing-and-services) - [Breach & Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [IoT Security Assessment](https://www.aujas.com/internet-of-things-security-assessment) - [Red Teaming](https://www.aujas.com/red-teaming-services) - [Integrated Security Assurance Program](https://www.aujas.com/isap) - [DDoS Simulation](https://www.aujas.com/ddos-attack-simulation-services) - [DevSecOps](https://www.aujas.com/devsecops) - [API Security](https://www.aujas.com/api-security) - [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Software Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) - [Registered Device Management Platform](https://www.aujas.com/registered-device-management-platform) - [Managed Detection and Response](https://www.aujas.com/managed-detection-and-response-services) - [Offensive Security Services](https://www.aujas.com/offensive-security-services) - [OT Security Services](https://www.aujas.com/ot-security-services) - [Microsoft Sentinel](https://www.aujas.com/sentinel) - [Threat Management](https://www.aujas.com/threat-management-service) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) - [Cloud Security](https://www.aujas.com/cloud-computing-security-services) - [AWS Cloud Security Services](https://www.aujas.com/aws-cloud-security-services) - [Cloud Security Foundation](https://www.aujas.com/cloud-security-foundation) - [Cloud Risk Management](https://www.aujas.com/cloud-risk-management) - [Cloud Security Engineering](https://www.aujas.com/cloud-security-engineering) - Products - [PALM](https://www.aujas.com/platform-for-access-lifecycle-management) - [Saksham](https://saksham.aujas.com) - [CodeSign](https://codesign.aujas.com) - [Aadhaar Registered Device Manager](https://www.aujas.com/registered-device-management-platform) - Company - [About us](https://www.aujas.com/about-us) - [Investor Relations](https://www.aujas.com/investor-relations) - [Team](https://www.aujas.com/team) - [Partnership](https://www.aujas.com/partnership) - [Contact us](https://www.aujas.com/contact-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Studies](https://www.aujas.com/case-study) - [Contact Sales](https://www.aujas.com/contact-us) - ![](https://www.aujas.com/hubfs/Aujas%202020/blue-search.png) ![](https://www.aujas.com/hubfs/Aujas%202020/close.png)     ### Sr. Consultant – Security Architecture Review+App Sec / Compliance | Experience: 5+ Years Location: Mumbai (India) Category: Security Verification Job Id: 56781 - - - ## Responsibilities: - Lead SecArch deep dives with the requestor of the assessment - Conduct assessment and provide technology risk/requirements to the requestor. Areas covered: - AAA – Authentication, Authorization, Auditing - Application Security – Session Security, Vulnerability/Pen Testing items, Input Validation - Secure data transport and storage - Periodically review security reference architecture (security blueprints) and conduct updates/enhancements - Participate in various Operational and Technology Risk governance processes - Assist in identifying new areas and opportunities of technology investment for the firm ## Desired Profile: - Excellent communication skills: written, oral, presentation, listening - Ability to influence through factual reasoning - Time management: ability to handle multiple concurrent assessments, plan based deliverable management, strong follow up and tracking - Strong focus on delivery when presented with short timelines and increased involvement from senior management - Ability to adjust communication of technology risks vs business risks based on the audience   **Security Architecture Skills** - Required – In depth knowledge of application and basic knowledge of and network and platform security vulnerabilities. Ability to explain these vulnerabilities to developers - Required – Experience in conducting Information Security, IT Security, Audit assessments. Presenting the outcomes of the assessment and obtaining buy-in. - Required – Strong focus on reviewing technical designs and functional requirements to identify areas of Security weakness. - Required – The candidate must have working experience in the following application/network security domains: - Authentication: SAML, SiteMinder, Kerberos, OpenId - Entitlements and identity management - Data protection, data leakage prevention and secure data transfer and storage - App Security - validation checking, software attack methodologies - Cryptography – encryption and hashing - Required – Even though the SecArch Integrator role is not a development role, the candidate must have understanding in programming, design and application architecture. - Required – In order to be a practical SecArch Integrator the candidate must have experience implementing complex applications in an enterprise environment. - Required – knowledge of programming and scripting languages: Java, JavaScript, C#, C/C++, Perl, Python, Ruby   **Other Areas of Expertise** - Frameworks, protocols and subsystems: J2EE, .NET, Spring, RPC, SOAP, MQSeries, JMS, RMI, JMX, Hibernate. - Knowledge of JSP /Servlet/EJB or ASP.NET, HTTP/HTTPS, Cookies, AJAX, JavaScript, Flex / Silverlight. - Database design and programming experience - Experience of liaising with 3rd Party Entities (exchanges, suppliers, regulators) - Experience in conducting and / or reviewing penetration tests, dynamic vulnerability assessments and static vulnerability assessments - Understanding of geographic regulations and their impact on Security assessments - Previous experience in Financial Services is preferred - CISSP or other industry qualification - Desired – experience working with global organizations   **Learn more about our [Security Verification Services](https://www.aujas.com/security-verification-services).** ## Apply Now ![Footer-Logo](https://www.aujas.com/hubfs/Aujas%202019/Footer/Footer-Logo.png "Footer-Logo") ## Reach Us [+1 201 389 9011](tel:+1%20201%20389%209011) ## Write To Us **Sales:** [contact@aujas.com](mailto:contact@aujas.com) **Jobs:** [careers@aujas.com](mailto:careers@aujas.com) **HR Queries:** [HRopsteam@aujas.com](mailto:hropsteam@aujas.com)   - [1](https://www.linkedin.com/company/aujas-cybersecurity) - [2](https://twitter.com/AujasIRM) - [3](https://www.facebook.com/AujasCybersec/?ref=py_c) - [4](https://www.youtube.com/@AujasCybersecurity) ## [Identity and Access Management](https://www.aujas.com/identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [PIM Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) ## [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Automation](https://www.aujas.com/grc-technology-automation-service) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management-old) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) ## Company - [About us](https://www.aujas.com/about-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - [Contact us](https://www.aujas.com/contact-us) ## Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Study](https://www.aujas.com/case-study) ## [Security Verification](https://www.aujas.com/security-verification-services) - [Threat Simulation](https://www.aujas.com/threat-simulations) - [loT Security](https://www.aujas.com/internet-of-things-security-assessment) - [Penetration Testing](https://www.aujas.com/crest-certified-penetration-testing-services) ## [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [CodeSign Platform](https://codesign.aujas.com/) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) ## [Managed Detection and Response](https://www.aujas.com/managed-threat-detection-and-response-services) - [Threat Management](https://www.aujas.com/threat-management) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [Automated & Continous Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) ## [Identity and Access Management](https://www.aujas.com/identity-access-management-services) - [Identity Governance Fast Track](https://www.aujas.com/iam-identity-governance-fast-track) - [PIM Fast Track](https://www.aujas.com/privileged-identity-management) - [Cloud Single Sign-on Fast Track](https://www.aujas.com/cloud-sso) - [Robotics Driven IAM](https://www.aujas.com/robotics-iam-services) - [Risk Aware IAM](https://www.aujas.com/risk-aware-iam) - [Consumer IAM](https://www.aujas.com/consumer-identity-and-access-management) ## [Cybersecurity Advisory Services](https://www.aujas.com/cybersecurity-advisory-services) - [Cyber Risk Management](https://www.aujas.com/cyber-risk-management-services) - [Integrated Compliance Management](https://www.aujas.com/cybersecurity-compliance-services) - [GRC Automation](https://www.aujas.com/grc-technology-automation-service) - [Third Party Risk Management](https://www.aujas.com/third-party-risk-management-old) - [Privacy and Data Protection](https://www.aujas.com/data-privacy-data-protection-services) ## [Security Verification](https://www.aujas.com/security-verification-services) - [Threat Simulation](https://www.aujas.com/threat-simulations) - [loT Security](https://www.aujas.com/internet-of-things-security-assessment) - [Penetration Testing](https://www.aujas.com/crest-certified-penetration-testing-services) ## [Security Engineering](https://www.aujas.com/security-engineering-services) - [Secure Development](https://www.aujas.com/secure-software-development) - [Ecosystem Engineering](https://www.aujas.com/ecosystem-engineering) - [CodeSign Platform](https://codesign.aujas.com/) - [Custom Security Development](https://www.aujas.com/custom-security-solution-development) ## [Managed Threat Detection and Response](https://www.aujas.com/managed-threat-detection-and-response-services) - [Threat Management](https://www.aujas.com/threat-management) - [SIEM & Security Monitoring](https://www.aujas.com/siem-security-monitoring) - [Automated & Continous Attack Simulation](https://www.aujas.com/automated-continuous-attack-simulation) - [SecOps Orchestration](https://www.aujas.com/security-orchestration-automation-and-response) - [Google SecOps](https://www.aujas.com/googlesecops) ## Company - [About us](https://www.aujas.com/about-us) - [Careers](https://www.aujas.com/cybersecurity-careers) - [Contact us](https://www.aujas.com/contact-us) ## Resources - [Blog](https://blog.aujas.com) - [Collaterals](https://www.aujas.com/collaterals) - [Case Study](https://www.aujas.com/case-study) Copyrights © 2025 All Rights Reserved by Aujas. - [Terms of Use](https://www.aujas.com/terms-of-service) - [Privacy Policy](https://www.aujas.com/privacy-policy) - [Cookie Policy](https://www.aujas.com/cookie-policy) ![](https://px.ads.linkedin.com/collect/?pid=656027&fmt=gif) ![websights](https://ws.zoominfo.com/pixel/62839c658f43f50012ae3b9a)