Cyber Security - Manager at Aqilea formerly Soltia

Bengaluru, karnataka, India -

Full Time

Start Date

Immediate

Expiry Date

07 Jul, 26

Salary

0.0

Posted On

08 Apr, 26

Experience

10 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Cyber Security, Software Security, SSDLC, OWASP, NIST SSDF, ISO/IEC 27034, SAST, DAST, SCA, Threat Modelling, Cloud-native, API Security, AI Governance, CISSP, Risk Management, Stakeholder Management

Industry

IT Services and IT Consulting

Description

Aqilea is an IT and engineering consulting partner that helps companies get more out of their technology and operations. With teams in Stockholm and Bangalore, we work closely with our clients to build solutions that fit their needs - from software development, AI and infrastructure engineering to industrial automation and embedded systems. We combine strong technical expertise with a practical, business-focused approach to help organizations modernize, improve security, and scale with confidence. Above all, we focus on long-term partnerships built on trust, quality, and real results. With us, you have great opportunities to take real steps in your career and the opportunity to take great responsibility. About the Role Company: Aqilea India Role: Cyber Security Manager Experience: 9+ Years Location: Bangalore (Hybrid) Job Summary We are looking for a Cyber Security Manager professional to lead and strengthen Software Security across a retail organization. This role focuses on building secure software development practices, enabling development teams with the right tools and guidance, and ensuring security is built into applications from design to deployment. You will work as part of a central Software Security team, defining standards, security patterns, and automated guardrails that help teams deliver software safely and quickly. Key Responsibilities Central Software Security Team Lead role owning the group-wide Software Security capability, defining the target state/maturity and scaling secure software development across organization aligned to OWASP, NIST SSDF, and ISO/IEC 27034. Lead: capability ownership (scope, objectives, maturity model, roadmap) and architectural alignment; central team (not embedded in squads) enabling product teams via guidance, guardrails, tooling, and automation SSDLC focus / controls: secure design patterns + reference architectures; SSDLC guardrails mapped to OWASP/SAMM/ASVS (and MASVS), NIST SSDF, ISO/IEC 27034; threat modelling/abuse cases; risk-based triage and acceptance criteria Experience needed: deep SSDLC and secure architecture background with practical experience across software security testing/tooling (SAST/DAST/SCA etc.) and ability to translate standards into usable controls and paved roads Expectations: Lead the work and drive alignment with stakeholder, prioritise backlog, manage stakeholders, represent in governance forums, drive continuous uplift across domains (web/mobile/APIs/cloud-native), track KPIs (coverage, time-to-fix, false positives, adoption) and improve developer experience AI alignment: define secure-by-default patterns for AI-assisted development and AI-enabled applications (guardrails for assistants, governance for AI-generated code, and secure design for LLM features) Certification: CISSP (Mandatory) Leadership & Collaboration (for Lead role) Own the software security roadmap and capability maturity. Work closely with engineering, platform, and leadership teams. Mentor engineers and promote a strong security culture. Required Skills & Experience Lead the Software Security capability strategy and maturity roadmap Lead stakeholder engagement and represent software security in architecture and governance forums Lead adoption of secure development practices, including AI‑assisted development, across engineering Aligns the capability to industry standards such as ISO/IEC 27034, NIST SSDF, and OWASP Start: Immediate to 15 Days Location: Bangalore (Hybrid)

Responsibilities

The Cyber Security Manager will lead the central software security team to define and scale secure development practices across the organization. This includes implementing security guardrails, managing architectural alignment, and ensuring compliance with industry standards like NIST and OWASP.