[Hiring] Security Architect & India Technical Team Lead @Porch Group

Role Description

The future is bright for the Porch Group, and we'd love for you to be a part of it as our Security Architect & India Technical Team Lead with the Information Security team. The Security Architect plays a critical role in safeguarding Porch's digital assets and reputation against security breaches, cyber-attacks, and unauthorized access. Their primary responsibility is to ensure the integrity, confidentiality, and availability of Porch information systems.

As a Security Architect, you will be responsible for:

• Designing, implementing, and maintaining security measures to protect Porch's cloud workloads, identities, networks, and data.
• Analyzing potential security threats, developing strategies to mitigate risks, and responding to security incidents.
• Providing technical leadership to the security team and collaborating with cross-functional teams to ensure compliance with Porch's security policy and compliance requirements.

Qualifications

• 10+ years in information security, with 5+ years in a security architecture or senior security engineering role.
• 3+ years leading technical teams (formal or matrixed), including mentoring senior engineers.
• Incident response experience as technical lead on high-severity incidents, including scoping, containment, and postmortem ownership.
• Demonstrated hands-on penetration testing experience — personally scoped and executed web, API, and cloud pen tests and written the reports.
• Fluency in AI security — practical understanding of LLM and agentic system threat models, guardrail design, and AI red teaming.
• Strong application security depth: secure code review, OWASP Top 10 and API Security Top 10, threat modeling, and secure SDLC integration.
• Deep hands-on expertise in at least one major cloud platform, plus container/Kubernetes security and infrastructure-as-code.
• Hands-on experience with SIEM and security operations, including data onboarding, parsing, and query authoring.
• Demonstrated ownership of enterprise-scale identity, network segmentation, or data protection architecture.
• Working fluency with at least two compliance frameworks and experience designing controls that hold up under audit.
• Scripting/automation capability (Python, Go, or equivalent) sufficient to build tooling, write exploits, and validate controls independently.
• Track record of influencing engineering teams without direct authority; strong written communication for design docs, risk narratives, and pen test reports.

Requirements

• Preferred: Experience using AI to facilitate penetration testing — LLM-assisted recon, payload generation, finding triage, or agentic offensive tooling.
• Preferred: Offensive security certifications: OSCP, OSWE, OSEP, GPEN, GWAPT, or equivalent demonstrated capability.
• Preferred: Architecture certifications: CISSP, CCSP, SABSA, or cloud-specific architect credentials.
• Preferred: AI security credentials or contributions — OWASP LLM Top 10 involvement, published AI red team research, CTF or bug bounty results against AI systems.
• Preferred: Experience in a distributed, multi-region organization with a significant India engineering presence.
• Preferred: Background in threat modeling methodologies (STRIDE, PASTA) and zero-trust architecture implementation.
• Proven experience working with US based business teams.
• Ability to work within core US business hours / time zone expectations - Eastern Standard Time (EST) overlap.

Benefits

• Pay Range*: ₹26,25,000 – ₹36,75,000 INR Annually.
• Comprehensive coverage for health, life, and financial wellbeing.
• Medical insurance, accident insurance, and retiral benefits.
• Wellness programs including 12 company-paid holidays, 2 flexible holidays, privilege/earned leave, casual/sick leave, paid maternity and paternity leaves, and weekly wellness events.