Principal Product Architect
- Compensation
- Not disclosed
- Location
- Hyderabad, India
- Work setup
- Not specified
- Seniority
- Principal
- Employment
- Not specified
- Experience
- 12+ years
- Category
- Architecture
- Posted
Skills
Nice to have
- Experience architecting SOC platforms, MXDR/managed detection services, or attack surface management tooling specifically.
- Prior experience in an offensive security context (red team, penetration testing, or adversary simulation) that informs how you think about defensive product design.
- Relevant industry certifications (OSCP, CISSP, GCIA, GCTI, or similar).
- Experience building or scaling products at a high-growth cybersecurity startup.
Full description
**Principal
Product Architect – CybersecurityLocation: Hyderabad, India (On-site) Department:** Product & Engineering
Experience: 12+ years, including significant
time in cybersecurity product companies
**About
NopalCyber**
NopalCyber
is an AI-native cybersecurity company that combines offensive and defensive
security through its proprietary Exposure Reduction Platform and AI-powered
Cyber Intelligence Quotient (CIQ) risk-scoring engine, enabling organizations
to continuously discover, validate, prioritize, detect, respond to, and
remediate cyber risk across complex enterprise environments.
**Role
Summary**
We're
looking for a Principal Product Architect to own the technical architecture
behind NopalCyber's integrated product portfolio — from our External Attack
Surface Management to Internal Attack Surface Management to detection and
response platform. This is a hands-on, high-influence role for someone who has
spent their career inside cybersecurity product companies, understands how
attackers and defenders actually operate, and knows how to translate that
understanding into scalable, secure, and elegant product architecture. You'll
set technical direction across multiple product lines, partner closely with
Product Management and Engineering leadership, and mentor architects and senior
engineers across the org.
**Key
Responsibilities**
- Own end-to-end architecture for
Nopal360 (e.g., MXDR/SOC platform, EASM, IASM GRC tooling), from concept
through scale, ensuring designs are secure, resilient, and built for
multi-tenant, high-volume telemetry environments.
- Translate a deep, current
understanding of the threat landscape — adversary tactics, techniques, and
procedures (TTPs), emerging attack vectors, and the evolving regulatory
environment — into product and platform decisions that keep NopalCyber
ahead of the threats it defends against.
- Define architectural standards,
patterns, and guardrails (data ingestion pipelines, detection engines, API
design, identity and access controls, cloud infrastructure) that scaleacross the Nopal 360° platform.