{"id":3075876,"url":"https://alion.io/job/hcltech-senior-solution-architect-22","title":"Senior Solution Architect","company":{"id":225,"name":"HCLTech","domain":"hcltech.com","url":"https://alion.io/company/hcltech","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Solutions","role_family":"Solutions","seniority":"staff","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":32000,"max_usd":56000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"C#","optional":false},{"name":"Checkmarx","optional":false},{"name":"Checkov","optional":false},{"name":"CI/CD","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Claude Code","optional":false},{"name":"CodeQL","optional":false},{"name":"Context Engineering","optional":false},{"name":"Copilot","optional":false},{"name":"Cursor","optional":false},{"name":"CVSS","optional":false},{"name":"Dependabot","optional":false},{"name":"EPSS","optional":false},{"name":"GCP","optional":false},{"name":"GitHub","optional":false},{"name":"GitLab","optional":false},{"name":"Go","optional":false},{"name":"HIPAA","optional":false},{"name":"ISO 27001","optional":false},{"name":"Java","optional":false},{"name":"KEV","optional":false},{"name":"Kubernetes","optional":false},{"name":"Kyverno","optional":false},{"name":"LLM","optional":false},{"name":"Mend","optional":false},{"name":"Model Context Protocol","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"OWASP ZAP","optional":false},{"name":"PCI DSS","optional":false},{"name":"pre-commit","optional":false},{"name":"Python","optional":false},{"name":"Renovate","optional":false},{"name":"SBOM","optional":false},{"name":"Semgrep","optional":false},{"name":"SLSA","optional":false},{"name":"Snyk","optional":false},{"name":"SOC 2","optional":false},{"name":"STRIDE","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Trivy","optional":false},{"name":"TypeScript","optional":false},{"name":"Veracode","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-22T10:45:43Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-23T11:59:33Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":1},"description":"Job Summary\nThe Application Security Architect defines and drives secure-by-design architecture, standards, and controls for applications and services. AI-augmented vulnerability remediation is a core discipline of the role: orchestrating and tuning application security tooling (SAST, DAST, SCA, container/IaC scanning, and ASPM) with LLM-based auto-fix and agentic triage, prioritizing by reachability and exploitability, and making sure every AI-generated fix is validated before it is merged.\nThe role leads threat modeling, secure architecture reviews, and risk-acceptance decisions; defines remediation playbooks, SLAs, and burn-down metrics; embeds automated security gates and fix suggestions into CI/CD and AI coding workflows; and partners with AppSec, engineering, and compliance teams. It is a hands-on, AI-native engineer-architect who sets reusable patterns for the wider organization.\nDefine and drive secure-by-design architecture, standards and controls for applications and services, with AI-augmented vulnerability remediation as a core discipline: orchestrate and tune SAST, DAST, SCA, container/IaC scanning and ASPM tooling (e.g. Snyk, Semgrep, Mend, Checkmarx, Corgea) with LLM-based auto-fix and agentic triage; apply reachability and exploitability analysis to prioritize true-positive, business-critical findings; validate AI-generated fixes for correctness, regression safety and no new risk before merge; lead threat modeling, secure architecture reviews and risk-acceptance/compensating-control decisions; define remediation playbooks, SLAs and vulnerability backlog burn-down metrics; embed automated security gates and fix-suggestions into CI/CD and AI coding workflows (Copilot, Claude Code, Cursor); partner with AppSec, engineering and compliance teams. Mandatory across all roles: practical AI-native engineering; strong modern application development; cloud-native, API, microservices and DevSecOps grounding; hands-on experience with at least one agent harness such as Claude Code, GitHub Copilot, Codex, Kiro or Cursor; enterprise security, governance, evaluation, observability and cost awareness.\nKey Responsibilities\nA. Secure-by-Design Architecture & Standards Define and drive secure-by-design architecture, standards, and control baselines for applications, APIs, microservices, and cloud-native services. Establish secure reference architectures and \"paved road\" patterns (authentication and authorization, secrets management, input validation, data protection, secure defaults, supply-chain controls). Align standards with recognized frameworks (e.g., OWASP ASVS and Top 10, NIST SSDF, SLSA, CIS benchmarks, ISO 27001) and with client and regulatory requirements. B. Security Tooling Orchestration Orchestrate and tune SAST, DAST, SCA, container scanning, IaC scanning, and ASPM tooling (e.g., Snyk, Semgrep, Mend, Checkmarx, Corgea) across the software delivery lifecycle. Select, integrate, and rationalize tools; manage rule sets, policies, baselines, and suppressions to reduce noise while preserving coverage. Consolidate findings into a unified view (ASPM) with deduplication, ownership mapping, and business-context enrichment. C. AI-Augmented Vulnerability Remediation Design LLM-based auto-fix and agentic triage workflows: finding intake, code and dependency context gathering, root-cause analysis, fix generation, pull request creation, and follow-up. Apply reachability and exploitability analysis (call-graph and data-flow reachability, exploit intelligence such as KEV and EPSS, runtime and exposure context) to prioritize true-positive, business-critical findings. Validate AI-generated fixes for correctness, regression safety, and no new risk before merge: re-scan, run unit, integration, and security tests, check for introduced vulnerabilities, license or dependency side effects, and behavioral changes; require human review for defined risk tiers. Define when auto-fix may merge automatically, when it requires approval, and when it must be handled manually. Measure the quality of AI remediation (fix acceptance rate, false-fix rate, regression rate, time-to-remediate) and tune prompts, context, and models accordingly. D. Threat Modeling, Architecture Review & Risk Decisions Lead threat modeling (e.g., STRIDE, attack trees, data-flow analysis) and secure architecture reviews for new and changing systems, including AI and agentic applications. Lead risk-acceptance and compensating-control decisions: document rationale, residual risk, expiry, and ownership; escalate appropriately. Review the security of AI-specific components such as LLM integrations, agents, tools, and MCP servers (prompt injection, excessive agency, data leakage, supply-chain risk). E. Playbooks, SLAs & Metrics Define remediation playbooks by vulnerability class and technology stack. Define vulnerability SLAs by severity, exploitability, and asset criticality; drive exception handling. Define and report vulnerability backlog burn-down metrics: mean time to remediate, aging, SLA adherence, fix rates by team, reachable-vs-total findings, and auto-fix share. F. CI/CD, AI Coding Workflows & DevSecOps Embed automated security gates and fix suggestions into CI/CD pipelines (pre-commit, pull request, build, deploy, runtime), with tiered blocking and warning policies. Integrate security guidance and fix suggestions into AI coding workflows (GitHub Copilot, Claude Code, Cursor and similar): secure prompts and rules files, security skills and MCP tools, policy checks on generated code, and guardrails against insecure patterns and risky dependencies. Apply supply-chain security practices: SBOM generation, provenance and signing, dependency policies, and secrets scanning. Define evaluation, observability, and cost controls for security automation and LLM usage (precision/recall of findings, fix-quality evaluation, tracing, token and scan cost). G. Collaboration, Governance & Enablement Partner with AppSec, engineering, platform, and compliance teams; translate security requirements into practical, developer-friendly controls. Provide audit and compliance evidence for security controls and remedi\nSkill Requirements\nBachelor's or Master's degree in Computer Science, Information Security, Engineering, or an equivalent field, or equivalent practical experience.\n12+ years in software engineering, application security, or security architecture, with at least 5 years in AppSec or DevSecOps and at least 2 years applying LLMs or agents to security or engineering workflows.\nTrack record of operating AppSec tooling at enterprise scale and reducing vulnerability backlogs measurably.\nTechnical Skills (Must Have)\nSecure-by-design architecture: secure architecture patterns, authentication and authorization, cryptography and secrets, data protection, zero-trust principles, secure API and microservice design.\nApplication security tooling: hands-on with SAST, DAST, SCA, container scanning, IaC scanning, and ASPM, including tuning and policy management on tools such as Snyk, Semgrep, Mend, Checkmarx, and Corgea.\nAI-augmented remediation: LLM-based auto-fix and agentic triage design, including context engineering, fix generation, and pull request automation.\nReachability and exploitability prioritization: call-graph and data-flow reachability, KEV/EPSS/CVSS interpretation, business-context risk scoring.\nFix validation: verifying correctness, regression safety, and no new risk, using tests, re-scanning, diff analysis, and tiered human review.\nThreat modeling and architecture review: STRIDE and equivalent methods; risk assessment; compensating controls and risk acceptance.\nVulnerability management operations: playbooks, SLAs, backlog management, burn-down metrics, and executive reporting.\nCI/CD and AI coding workflow integration: security gates, pre-commit and PR checks, rules files, skills, and MCP tools for Copilot, Claude Code, Cursor, and similar tools.\nSupply-chain security: SBOM, provenance, signing, dependency governance, secrets scanning.\n AI-native engineering: practical use of AI across the development lifecycle; hands-on with at least one agent harness (Claude Code, GitHub Copilot, Codex, Kiro, or Cursor).\nModern application development: strong proficiency in at least one language such as Java, Python, TypeScript, Go, or C#; able to read, write, and review production code and fixes.\nCloud-native, API & microservices: AWS/Azure/GCP, containers, Kubernetes, service design, API security.\nDevSecOps: CI/CD pipelines, infrastructure as code, policy as code, secure SDLC.\nEnterprise readiness: security, governance, evaluation, observability, and cost awareness, including cost modeling for scan and LLM usage.\nBehavioral & Professional Skills\nRisk-based judgment; balances security rigor with delivery speed and developer experience.\nInfluences engineering teams without authority; explains security trade-offs clearly to executives, developers, and auditors.\nEvidence-driven; comfortable questioning tool output and AI-generated fixes rather than trusting them by default.\nMentoring, collaboration, and strong ownership across CoE, AppSec, engineering, and compliance teams.\nOther Requirements\nRole-specific\nAdditional AppSec and remediation tools (e.g., GitHub Advanced Security and Copilot Autofix, GitLab, Veracode, Sonar, Black Duck, Aikido, Dependabot, Renovate, Trivy, Checkov, OWASP ZAP, Burp).\nRuntime and cloud security (CNAPP, CSPM, RASP, runtime reachability, WAF/API protection).\nSecure AI and LLM application security (OWASP Top 10 for LLM Applications, MITRE ATLAS, AI red-teaming).\nPolicy as code (OPA/Rego, Kyverno, Conftest) and secure pipeline hardening.\nStatic analysis internals: writing custom Semgrep or CodeQL rules, taint analysis, program analysis.\nLarge-scale automated code change and migration tooling (e.g., OpenRewrite).\nBug bounty, penetration testing, or red-team background.\nCompliance frameworks and evidence automation (SOC 2, PCI DSS, HIPAA, ISO 27001, DORA).\nDomain exposure in BFSI, healthcare, telecom, or public sector.\nCommon competencies (mandatory across all roles)\nPractical AI-native engineering and strong modern application development.\nCloud-native, API, microservices, and DevSecOps grounding.\nHands-on experience with at least one agent harness (Claude Code, GitHub Copilot, Codex, Kiro, Cursor).\nEnterprise security, governance, evaluation, observability, and cost awareness.\nCertifications (preferred, not mandatory)\nSecurity: CSSLP, CISSP, GIAC (GWEB, GSSP), OSWE, or equivalent.\nCloud security or architect certifications (AWS, Azure, or GCP).\nVendor tool certifications (e.g., Snyk, Checkmarx) and TOGAF or SABSA for architecture.","description_format":"text","description_chars":10679,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":true},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","IT Outsourcing & Dedicated Teams","Systems Integrators"],"lifecycle":[{"event":"open","at":"2026-10-22T10:45:43Z"}],"visa":[],"liveness":{"score":99,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.993,"p_room":1,"age_days":0,"expected_fill_days":30,"reasons":["conf:4","wave","velocity","win:early","comp:brand"],"computed_at":"2026-10-23T05:54:15Z"},"pay":null,"html_url":"https://alion.io/job/hcltech-senior-solution-architect-22","json_url":"https://alion.io/job/hcltech-senior-solution-architect-22.json","meta":{"generated_at":"2026-10-23T16:44:24Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25367,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":225},"rest":"https://alion.io/mcp/rest/get_company?id=225"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhcltech-senior-solution-architect-22"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhcltech-senior-solution-architect-22"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhcltech-senior-solution-architect-22"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hcltech-senior-solution-architect-22\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhcltech-senior-solution-architect-22"}]}