AppSec & AI Security Architect at Hewlett Packard Enterprise

Bengaluru, Karnataka, India

Hewlett Packard Enterprise Logo
Not SpecifiedCompensation
Senior (5 to 8 years), Expert & Leadership (9+ years)Experience Level
Full TimeJob Type
UnknownVisa
Technology, CybersecurityIndustries

Requirements

  • Experienced application security professional with strong grasp of software architecture and secure SDLC principles
  • Ability to analyze complex architectures, identify design-level risks, and provide clear, actionable recommendations
  • Awareness of AI/ML and LLM integration risks, such as model input validation, prompt injection, and data handling
  • Thrive in collaboration with developers, architects, and engineering teams to make secure design decisions practical, scalable, and developer-friendly

Responsibilities

  • Defining and maintaining secure application architecture patterns, reference designs, and reusable components across enterprise and cloud-native ecosystems
  • Performing architecture risk assessments and threat modeling for major application programs, APIs, and platforms
  • Leading adoption of Web Application and API Protection (WAAP) controls and Application Security Posture Management (ASPM) tools to enable continuous risk visibility and compliance
  • Embedding security controls in SDLC and CI/CD pipelines, including SAST, DAST, SCA, IaC, and container scanning
  • Designing and governing security for Kubernetes-based and containerized workloads, including service mesh and runtime protection
  • Developing and enforcing standards for API and microservices security, including authentication, authorization, and token lifecycle management (OAuth2, OIDC, mTLS)
  • Establishing secure-by-default configurations for CI/CD and GitOps pipelines (e.g., ArgoCD, Flux, Jenkins, GitHub Actions)
  • Partnering with engineering teams to design secure cloud-native and hybrid architectures across AWS, Azure, and GCP
  • Providing security guidance for applications leveraging AI/ML or LLM capabilities, such as input/output sanitization, model integrity, and data protection
  • Establishing application security KPIs, governance models, and maturity metrics
  • Contributing to secure adoption of AI technologies, ensuring new AI-enabled systems meet enterprise standards for data protection, privacy, and model integrity

Skills

Key technologies and capabilities for this role

Application SecurityAI SecuritySecure Software DesignDevSecOpsThreat ModelingAPI SecuritySecurity ArchitectureSecurity-by-Design

Questions & Answers

Common questions about this position

Is this role remote or onsite?

This role is designed as ‘Onsite’ with an expectation that you will primarily work from an HPE office.

What is the salary or compensation for this position?

This information is not specified in the job description.

What skills are required for the AppSec & AI Security Architect role?

Required skills include experience in application security, software architecture, secure SDLC principles, analyzing complex architectures for risks, and awareness of AI/ML risks like model input validation, prompt injection, and data handling.

What is the company culture like at HPE?

HPE's culture thrives on finding new and better ways to accelerate what’s next, values varied backgrounds, offers flexibility to manage work and personal needs, embraces bold moves together, and supports career growth.

What makes a strong candidate for this role?

A strong candidate is an experienced application security professional who thrives in collaboration with developers, architects, and engineering teams, can provide actionable recommendations on design risks, and makes secure design decisions practical, scalable, and developer-friendly.

Hewlett Packard Enterprise

Provides enterprise IT solutions and services

About Hewlett Packard Enterprise

Hewlett Packard Enterprise provides enterprise IT solutions with a focus on cloud services, artificial intelligence, and edge computing. Their products include HPE Ezmeral for managing containers, HPE GreenLake for cloud services, and HPE Aruba for networking. These solutions help businesses improve their performance and adapt to digital changes. HPE's business model includes selling hardware, software, and services, as well as offering subscription-based services and long-term contracts. What sets HPE apart from competitors is its commitment to open-source projects and its active developer community, which supports collaboration and innovation. The company's goal is to empower organizations to transform digitally and optimize their operations.

Houston, TexasHeadquarters
1939Year Founded
IPOCompany Stage
Hardware, Enterprise Software, AI & Machine LearningIndustries
10,001+Employees

Risks

Integration challenges with Juniper Networks may delay AI-driven networking benefits.
Competition from startups like Flywheel could impact HPE's AI and cloud services.
HPE's acquisition strategy may strain resources and distract from core operations.

Differentiation

HPE's GreenLake offers a unique hybrid cloud platform for diverse IT environments.
HPE Ezmeral provides advanced container management, enhancing enterprise AI and analytics capabilities.
HPE's Aruba solutions integrate cloud security and networking for seamless, secure connectivity.

Upsides

HPE's acquisition of Juniper Networks boosts AI-driven innovation in networking.
OpsRamp acquisition enhances HPE's IT management with AI-based automation capabilities.
Axis Security integration strengthens HPE's cloud security offerings with SASE solutions.

Land your dream remote job 3x faster with AI