{"id":2929230,"url":"https://alion.io/job/hcltech-domain-architect-it-security","title":"Domain Architect - IT security","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Canada"],"countries":["CA"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":80000,"max_usd":148000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":8},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false}],"status":"live","first_seen_at":"2026-10-20T14:13:40Z","employer_posted_date":"2026-10-20","last_verified_at":"2026-10-24T13:04:26Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Job Summary\nThe Service Owner - Application Security, SDLC & Security Architecture is accountable for the strategy, governance, architecture alignment, and continuous improvement of enterprise application security capabilities across Research & Development, Commercial, and Corporate application portfolios. The role owns the application security roadmap, secure software development lifecycle (SDLC) practices, security architecture review processes, application security testing standards, and security support model. The Service Owner ensures applications are designed, developed, tested, and operated securely while enabling business teams to deliver secure solutions efficiently. The role partners with application development teams, solution architects, cybersecurity teams, business stakeholders, and technology teams to embed security throughout the application lifecycle.\nKey Responsibilities\nKey Responsibilities\nDefine and maintain the enterprise application security strategy, roadmap, and future-state capability model.\nOwn and continuously improve secure SDLC practices across R&D, Commercial, and Corporate application environments.\nEstablish security governance processes for application development, enhancement, and support activities.\nOwn the security architecture review process and provide governance for application security design decisions.\nPartner with solution architects, application owners, developers, and business stakeholders to identify security risks and recommend appropriate security controls.\nDefine and govern application security testing practices, including: o Security assessments o Vulnerability testing o Application security reviews o Penetration testing coordination o Security validation activities\nEstablish application security standards, documentation requirements, and reusable security patterns.\nSupport application teams throughout the application lifecycle, including design, development, implementation, and ongoing support.\nEvaluate application security tools and recommend improvements to enhance security effectiveness and developer experience.\nDrive adoption of secure engineering practices and security-by-design principles.\nDefine service KPIs, maturity objectives, and continuous improvement initiatives.\nEnsure application security capabilities align with regulatory, privacy, and healthcare requirements, including HIPAA where applicable.\nSkill Requirements\nRequired Skills & Experience\n10+ years of experience in application security, cybersecurity, software engineering, or security architecture.\nExperience owning enterprise application security capabilities across multiple business domains.\nExperience supporting application portfolios within complex organizations, including R&D, Commercial, and Corporate environments.\nStrong understanding of: o Secure SDLC practices o Security architecture reviews o Application security testing methodologies o Vulnerability management o DevSecOps principles o Application risk management\nExperience partnering with development teams, architects, and business stakeholders.\nExperience defining security standards, governance processes, and operating models.\nExperience working in regulated environments; healthcare experience and knowledge of HIPAA/security controls is preferred.\nOther Requirements\nOther Requirement : Required Skills & Experience\n10+ years of experience in application security, cybersecurity, software engineering, or security architecture.\nExperience owning enterprise application security capabilities across multiple business domains.\nExperience supporting application portfolios within complex organizations, including R&D, Commercial, and Corporate environments.\nStrong understanding of: o Secure SDLC practices o Security architecture reviews o Application security testing methodologies o Vulnerability management o DevSecOps principles o Application risk management\nExperience partnering with development teams, architects, and business stakeholders.\nExperience defining security standards, governance processes, and operating models.\nExperience working in regulated environments; healthcare experience and knowledge of HIPAA/security controls is preferred.\nKey Sourcing Information : NA\nInterviewer 1 SAP ID : 51939509\nJob Description : Required Skills & Experience\n10+ years of experience in application security, cybersecurity, software engineering, or security architecture.\nExperience owning enterprise application security capabilities across multiple business domains.\nExperience supporting application portfolios within complex organizations, including R&D, Commercial, and Corporate environments.\nStrong understanding of:\no Secure SDLC practices\no Security architecture reviews\no Application security testing methodologies\no Vulnerability management\no DevSecOps principles\no Application risk management\nExperience partnering with development teams, architects, and business stakeholders.\nExperience defining security standards, governance processes, and operating models.\nExperience working in regulated environments; healthcare experience and knowledge of HIPAA/security controls is preferred.","description_format":"text","description_chars":5136,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-20T14:13:40Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":3,"expected_fill_days":31,"reasons":["conf:2","wave","velocity","win:early","comp:brand"],"computed_at":"2026-10-24T06:02:35Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-domain-architect-it-security","json_url":"https://alion.io/job/hcltech-domain-architect-it-security.json","meta":{"generated_at":"2026-10-24T13:16:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":19026,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-25T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-domain-architect-it-security"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-domain-architect-it-security"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-domain-architect-it-security"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-domain-architect-it-security\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-domain-architect-it-security"}]}