Lead Software Security Architect (Cloud Security)

Overview

Lead Software Security Architect (Cloud Security)

Hyderabad | Hybrid - 3 Days/Week in Office

About the Role

The Lead Software Security Architect (Cloud Security) plays a critical role in safeguarding Hyland's products and services by ensuring secure design, rigorous testing, and proactive vulnerability management. In this role, you will define and drive security education programs, maintain comprehensive threat models, and lead the implementation of security controls across company products and services. If you're a cloud security expert who thrives on building secure systems and empowering engineering teams, this role is for you.

Technology Tools

• Cloud Security: AWS Security (AWS Security Specialty)
• Vulnerability Scoring: CVSS Scoring Framework
• Security Testing: Security Testing Tools & Methodologies
• Compliance Frameworks: NIST, ISO 27001, SOC2

Your Role Responsibilities - Here's What You'll Do

• Define and implement education programs that ensure software and test engineers understand secure software development practices and how to identify insecure code; regularly monitor the effectiveness of these programs and update as needed.
• Review software designs and test plans across company products to ensure they meet established security standards, and maintain comprehensive, up-to-date threat models for all company products and services.
• Lead the definition and review of security controls in products and services to align with the latest threat models, and develop and maintain documentation on all security controls used across company products and services.
• Ensure all tools used in the development of products are secure and meet industry standards; regularly review and validate the effectiveness of security verification tools to ensure consistent application.
• Promptly assess and prioritize remediation for both internally and externally discovered vulnerabilities within company software, and coordinate fixes for vulnerabilities in third-party software used within company products.
• Mentor, coach, train, and provide feedback to team members; operate as a trusted advisor and innovative thought leader, fostering a community of security best practices and promoting a culture of security across the organization.

Role Essentials - What You Bring

• Bachelor's degree in Computer Science or a related field, with 8+ years of experience in security testing methodologies and tooling
• Experience with CVSS scoring.
• 3+ years of experience with Cloud Security concepts, paired with an AWS Security Specialty certification or equivalent Cloud Security specialist certification.
• Knowledge on AWS, EKS, and Encryption
• 3+ years of experience with compliance controls including NIST, ISO 27001, SOC2, and related frameworks.
• 3+ years of experience with Security Incident processes, with the ability to assess, prioritize, and coordinate remediation of vulnerabilities in a timely and effective manner.
• Strong mentorship and coaching skills with the ability to guide engineering teams on secure software development practices and foster a culture of security across the organization.

What We'd Like to See - Preferred Skills

• Experience defining and implementing security education programs for engineering teams, with a proven track record of monitoring and continuously improving program effectiveness.
• Hands-on experience reviewing software designs and test plans against established security standards across complex, multi-product enterprise environments.
• Demonstrated ability to develop, review, and maintain comprehensive threat models for enterprise software products and services at scale.
• Experience serving as a primary security contact within a large organization, with the ability to communicate security concepts clearly to both technical and non-technical audiences.
• Proven track record of operating as an innovative thought leader, contributing to the overall growth and quality of a security function through knowledge sharing and coaching on best practices and market trends.

About Hyland

Hyland is the pioneer of the Content Innovation Cloud™, delivering ubiquitous enterprise intelligence to organizations with solutions that unlock actionable insights and drive automation.

Trusted by thousands of organizations worldwide, including many of the Fortune 100, Hyland's solutions create the foundation for a connected, agentic enterprise, where teams harness the power of AI to redefine how they operate and engage with those they serve. For additional information on Hyland's platform and services, please visit Hyland.com.

© Hyland. All rights reserved.

About Hyland Life

Since 1991, it has been Hyland's mission to help our employees, customers and partners exceed their potential with our industry-leading content services platform. Our employees exude a contagious energy and are passionate about what they do - whether it's helping customers succeed, raising up their fellow Hylanders, or engaging in the communities where they live and work.

The #HylandLife hashtag encompasses our employee-centric culture. Our employees live our culture day in and day out by bringing their best self to work. Hyland supports them to do just that through career development resources, wellbeing programs and innovation practices. We thrive on diverse viewpoints and new ideas and believe that a positive, inclusive workplace is imperative to sustainable success.

As we've grown to a company of nearly 4,000 strong, we have the opportunity to make a significant impact on our communities. We strongly support employee initiatives and align our giving campaigns and programs to organizations that are important to them.

Equal Opportunity Statement

Hyland is an equal opportunity employer. We value diversity and are committed to providing an inclusive workplace for all employees and applicants. Employment decisions are made without regard to any characteristic protected by applicable laws and regulations. Information collected during the hiring process is used solely to assess qualifications, verify identity, and comply with legal requirements.