Security Architect

• Project Role : Security Architect
• Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
• Must have skills : Security Penetration Testing
• Good to have skills : NA
• Minimum 12 year(s) of experience is required
• Educational Qualification : 15 years full time education

• Summary:
• As a Security Architect specializing in Breach & Attack Simulation (BAS) and Attack Surface Management (ASM), the role involves designing, deploying, and operationalizing continuous security validation and attack surface visibility capabilities across the organization. This position combines offensive security expertise with external exposure management — emulating real-world threat actors through automated simulations while maintaining continuous discovery and monitoring of the organization's digital attack surface. The role requires close collaboration with security operations, vulnerability management, threat intelligence, infrastructure, cloud, and application teams to drive measurable improvement in security posture and control effectiveness.

• Roles & Responsibilities:
• -Expected to be an SME collaborate and manage the team to perform across penetration testing, BAS and ASM operations at scale.
• -Responsible for team decisions and expected to provide solutions to problems that apply across multiple teams.
• -Engage with multiple teams including security operations, infrastructure, cloud, application and business units to contribute to key security decisions.
• -Facilitate knowledge sharing and mentorship within the team to foster professional growth and technical excellence.
• -Translate technical findings into clear business risks, decisions and actionable recommendations for executive and non-technical stakeholders.
• -Develop training materials and conduct knowledge-transfer sessions for penetration testing, BAS and ASM operations teams.
• -Deploy, configure, administer and maintain BAS platforms such as SafeBreach, AttackIQ, Cymulate, Picus Security, XM Cyber or Pentera, including simulator/agent deployment across endpoints, servers, network segments and cloud workloads.
• -Design, schedule and execute automated attack simulations mapped to MITRE ATT&CK tactics, techniques and procedures (TTPs) across the full cyber kill chain — initial access, execution, persistence, privilege escalation, defense evasion, credential access, lateral movement, C2 and data exfiltration.
• -Emulate real-world adversaries targeting financial services organizations, including ransomware operators, APT groups, phishing and BEC campaigns, using current Cyber Threat Intelligence (CTI).
• -Measure the effectiveness of security controls including EDR/XDR, SIEM, NGFW, IPS/IDS, WAF, Secure Email Gateway, Web Proxy/SWG, DLP, NAC and Active Directory security.
• -Identify prevention and detection gaps, perform risk-based prioritization and drive remediation with control owners and platform teams.
• Validate remediation through re-testing, track security control effectiveness and detection coverage trends over time, and support measurable security posture improvement.
• -Build and maintain custom attack scenarios, assessment templates and simulation playbooks using Python, PowerShell or Bash.
• -Produce executive dashboards, KPIs/KRIs and technical reports on control efficacy, MITRE ATT&CK coverage and risk reduction for CISO, security leadership, internal audit and regulators.
• -Design and implement Attack Surface Management (ASM) / External Attack Surface Management (EASM) capabilities to provide continuous visibility into the organization's digital attack surface.
• -Define ASM processes, governance, workflows and operating models.
• Perform continuous discovery and monitoring of internet-facing and digital assets including domains, subdomains, IP addresses, applications, APIs, cloud assets, certificates and exposed services.
• -Identify unknown, unmanaged, rogue and shadow IT assets perform asset attribution and establish ownership for discovered assets.
• -Analyze exposed services, vulnerabilities, misconfigurations, security controls and other external exposures.
• -Correlate ASM findings with Vulnerability Management, Threat Intelligence and CTEM processes.
• -Develop risk-based prioritization strategies based on asset criticality, exploitability, exposure and business impact.
• -Integrate ASM platforms with CMDB, SIEM, SOAR, ticketing and vulnerability management solutions.
• -Support M&A and subsidiary environments by identifying and assessing newly acquired digital assets.
• -Define dashboards, KPIs, KRIs, reports and management-level metrics for attack surface visibility.
• -Develop ASM runbooks, standard operating procedures, assessment methodologies and remediation workflows.
• -Evaluate ASM tools and capabilities support solution selection, PoCs and technical demonstrations.

• Professional & Technical Skills:
• -Must To Have Skills: Proficiency in Security Penetration Testing with strong expertise in Breach & Attack Simulation (BAS) and Attack Surface Management (ASM/EASM).
• -Strong working knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, adversary emulation and TTP analysis.
• -Hands-on experience with BAS platforms — SafeBreach, AttackIQ, Cymulate, Picus, XM Cyber or equivalent — and ASM platforms such as CrowdStrike Falcon -Surface, Tenable ASM, Microsoft Defender EASM, CyCognito or BitSight.
• -Experience with SIEM platforms — Splunk, IBM QRadar, Microsoft Sentinel, ArcSight or Securonix — including query languages (SPL, KQL, AQL).
• Experience with EDR/XDR solutions — CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Trellix or Carbon Black.
• -Solid understanding of network security, TCP/IP, firewalls, proxies, email security, Windows and Linux internals and Active Directory attack techniques (Kerberoasting, Pass-the-Hash, DCSync).
• -Strong knowledge of ASM/EASM concepts including external asset discovery, DNS, domains, subdomains, IP addresses, certificates, cloud assets, APIs and exposed services.
• -Knowledge of OSINT and reconnaissance techniques and tools.
• Scripting and automation skills in Python and/or PowerShell to build and maintain simulation frameworks and ASM workflows.
• -Knowledge of incident response, log analysis, malware behavior and threat intelligence concepts (IOCs, IOAs, STIX/TAXII).
• -Understanding of Vulnerability Management, Threat Intelligence and Continuous Threat Exposure Management (CTEM).
• -Experience integrating security platforms with CMDB, SIEM, SOAR and ticketing systems.
• -Awareness of financial services security regulations — PCI-DSS, ISO 27001, NIST CSF, SOX and relevant regional regulatory frameworks.
• Strong analytical, documentation and communication skills with the ability to present technical findings to non-technical and executive stakeholders.

• Additional Information:
• -The candidate should have a minimum of 12 years of overall cybersecurity experience, with at least 12 years in Security Penetration Testing, including 3–5 years of hands-on experience in Breach & Attack Simulation (BAS) and 2–4 years in Attack Surface Management (ASM/EASM).
• -This position is based at our Bengaluru office.
• -A 15 years full-time education is required.

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in