Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Good to have skills : NA

Minimum 12 year(s) of experience is required

Educational Qualification : 15 years full time education

As a Security Architect specializing in Breach & Attack Simulation (BAS) and Attack Surface Management (ASM), the role involves designing, deploying, and operationalizing continuous security validation and attack surface visibility capabilities across the organization. This position combines offensive security expertise with external exposure management — emulating real-world threat actors through automated simulations while maintaining continuous discovery and monitoring of the organization's digital attack surface. The role requires close collaboration with security operations, vulnerability management, threat intelligence, infrastructure, cloud, and application teams to drive measurable improvement in security posture and control effectiveness.

Roles & Responsibilities:

-Expected to be an SME collaborate and manage the team to perform across penetration testing, BAS and ASM operations at scale.

-Responsible for team decisions and expected to provide solutions to problems that apply across multiple teams.

-Engage with multiple teams including security operations, infrastructure, cloud, application and business units to contribute to key security decisions.

-Facilitate knowledge sharing and mentorship within the team to foster professional growth and technical excellence.

-Translate technical findings into clear business risks, decisions and actionable recommendations for executive and non-technical stakeholders.

-Develop training materials and conduct knowledge-transfer sessions for penetration testing, BAS and ASM operations teams.

-Deploy, configure, administer and maintain BAS platforms such as SafeBreach, AttackIQ, Cymulate, Picus Security, XM Cyber or Pentera, including simulator/agent deployment across endpoints, servers, network segments and cloud workloads.

-Design, schedule and execute automated attack simulations mapped to MITRE ATT&CK tactics, techniques and procedures (TTPs) across the full cyber kill chain — initial access, execution, persistence, privilege escalation, defense evasion, credential access, lateral movement, C2 and data exfiltration.

-Emulate real-world adversaries targeting financial services organizations, including ransomware operators, APT groups, phishing and BEC campaigns, using current Cyber Threat Intelligence (CTI).

-Measure the effectiveness of security controls including EDR/XDR, SIEM, NGFW, IPS/IDS, WAF, Secure Email Gateway, Web Proxy/SWG, DLP, NAC and Active Directory security.

-Identify prevention and detection gaps, perform risk-based prioritization and drive remediation with control owners and platform teams.

Validate remediation through re-testing, track security control effectiveness and detection coverage trends over time, and support measurable security posture improvement.

-Build and maintain custom attack scenarios, assessment templates and simulation playbooks using Python, PowerShell or Bash.

-Produce executive dashboards, KPIs/KRIs and technical reports on control efficacy, MITRE ATT&CK coverage and risk reduction for CISO, security leadership, internal audit and regulators.

-Design and implement Attack Surface Management (ASM) / External Attack Surface Management (EASM) capabilities to provide continuous visibility into the organization's digital attack surface.

-Define ASM processes, governance, workflows and operating models.

Perform continuous discovery and monitoring of internet-facing and digital assets including domains, subdomains, IP addresses, applications, APIs, cloud assets, certificates and exposed services.

-Identify unknown, unmanaged, rogue and shadow IT assets perform asset attribution and establish ownership for discovered assets.

-Analyze exposed services, vulnerabilities, misconfigurations, security controls and other external exposures.

-Correlate ASM findings with Vulnerability Management, Threat Intelligence and CTEM processes.

-Develop risk-based prioritization strategies based on asset criticality, exploitability, exposure and business impact.

-Integrate ASM platforms with CMDB, SIEM, SOAR, ticketing and vulnerability management solutions.

-Support M&A and subsidiary environments by identifying and assessing newly acquired digital assets.

-Define dashboards, KPIs, KRIs, reports and management-level metrics for attack surface visibility.

-Develop ASM runbooks, standard operating procedures, assessment methodologies and remediation workflows.

-Evaluate ASM tools and capabilities support solution selection, PoCs and technical demonstrations.

Professional & Technical Skills:

-Must To Have Skills: Proficiency in Security Penetration Testing with strong expertise in Breach & Attack Simulation (BAS) and Attack Surface Management (ASM/EASM).

-Strong working knowledge of the MITRE ATT&CK framework, Cyber Kill Chain, adversary emulation and TTP analysis.

-Hands-on experience with BAS platforms — SafeBreach, AttackIQ, Cymulate, Picus, XM Cyber or equivalent — and ASM platforms such as CrowdStrike Falcon -Surface, Tenable ASM, Microsoft Defender EASM, CyCognito or BitSight.

-Experience with SIEM platforms — Splunk, IBM QRadar, Microsoft Sentinel, ArcSight or Securonix — including query languages (SPL, KQL, AQL).

Experience with EDR/XDR solutions — CrowdStrike Falcon, Microsoft Defender for Endpoint, SentinelOne, Trellix or Carbon Black.

-Solid understanding of network security, TCP/IP, firewalls, proxies, email security, Windows and Linux internals and Active Directory attack techniques (Kerberoasting, Pass-the-Hash, DCSync).

-Strong knowledge of ASM/EASM concepts including external asset discovery, DNS, domains, subdomains, IP addresses, certificates, cloud assets, APIs and exposed services.

-Knowledge of OSINT and reconnaissance techniques and tools.

Scripting and automation skills in Python and/or PowerShell to build and maintain simulation frameworks and ASM workflows.

-Knowledge of incident response, log analysis, malware behavior and threat intelligence concepts (IOCs, IOAs, STIX/TAXII).

-Understanding of Vulnerability Management, Threat Intelligence and Continuous Threat Exposure Management (CTEM).

-Experience integrating security platforms with CMDB, SIEM, SOAR and ticketing systems.

-Awareness of financial services security regulations — PCI-DSS, ISO 27001, NIST CSF, SOX and relevant regional regulatory frameworks.

Strong analytical, documentation and communication skills with the ability to present technical findings to non-technical and executive stakeholders.

Additional Information:

-The candidate should have a minimum of 12 years of overall cybersecurity experience, with at least 12 years in Security Penetration Testing, including 3–5 years of hands-on experience in Breach & Attack Simulation (BAS) and 2–4 years in Attack Surface Management (ASM/EASM).

-This position is based at our Bengaluru office.

-A 15 years full-time education is required.

15 years full time education

About Accenture

Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360° value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360° value we create for our clients, each other, our shareholders, partners and communities. Visit us at   www.accenture.com

Equal Employment Opportunity Statement

We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, military veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.