Principal Product Architect

Principal Product Architect – Cybersecurity
Location: Hyderabad, India (On-site) Department: Product & Engineering
Experience: 12+ years, including significant time in cybersecurity product companies
About NopalCyber
NopalCyber is an AI-native cybersecurity company that combines offensive and defensive security through its proprietary Exposure Reduction Platform and AI-powered Cyber Intelligence Quotient (CIQ) risk-scoring engine, enabling organizations to continuously discover, validate, prioritize, detect, respond to, and remediate cyber risk across complex enterprise environments.
Role Summary
We're looking for a Principal Product Architect to own the technical architecture behind NopalCyber's integrated product portfolio — from our External Attack Surface Management to Internal Attack Surface Management to detection and response platform. This is a hands-on, high-influence role for someone who has spent their career inside cybersecurity product companies, understands how attackers and defenders actually operate, and knows how to translate that understanding into scalable, secure, and elegant product architecture. You'll set technical direction across multiple product lines, partner closely with Product Management and Engineering leadership, and mentor architects and senior engineers across the org.
Key Responsibilities
Own end-to-end architecture for Nopal360 (e.g., MXDR/SOC platform, EASM, IASM GRC tooling), from concept through scale, ensuring designs are secure, resilient, and built for multi-tenant, high-volume telemetry environments.
Translate a deep, current understanding of the threat landscape — adversary tactics, techniques, and procedures (TTPs), emerging attack vectors, and the evolving regulatory environment — into product and platform decisions that keep NopalCyber ahead of the threats it defends against.
Define architectural standards, patterns, and guardrails (data ingestion pipelines, detection engines, API design, identity and access controls, cloud infrastructure) that scale across the Nopal 360° platform.
Partner with Product Management to shape roadmap decisions, evaluating technical feasibility, security implications, and build-vs-buy tradeoffs for new capabilities.
Lead architecture reviews and design decisions in collaboration with engineering teams, ensuring consistency across services while leaving room for team-level autonomy.
Evaluate and integrate third-party threat intelligence feeds, detection frameworks (e.g., MITRE ATT&CK), and security tooling into the product architecture.
Act as a technical authority in conversations with customers, prospects, and partners on product architecture, security posture, and platform capabilities.
Mentor senior engineers and product architects, raising the technical bar across the organization.
Stay current on the threat landscape and competitive product landscape, and proactively bring in ideas that keep NopalCyber's products differentiated and effective.
What You'll Bring
12+ years of experience in software/security engineering, with a substantial portion spent at cybersecurity product companies (e.g., EDR/XDR, SIEM/SOAR, vulnerability management, CTEM, cloud security platforms).
A track record of architecting cybersecurity products end-to-end — not just consuming security tools, but having built them.
Strong, current understanding of the threat landscape: attacker TTPs, the MITRE ATT&CK framework, common attack vectors across network, cloud, identity, and application layers, and how detection and response systems are designed to counter them.
Proven experience designing distributed, cloud-native architectures that handle high-volume, high-velocity security telemetry (logs, alerts, events) with an emphasis on reliability and low-latency detection.
Deep knowledge of security architecture principles: zero trust, defense in depth, secure-by-design development, identity and access management, and data protection.
Hands-on fluency with cloud platforms (AWS, Azure, or GCP), modern data pipelines, and API-first design.
Experience partnering directly with Product Management and executive stakeholders to shape roadmap and make architectural tradeoffs under real business constraints.
Excellent communication skills — able to explain complex technical and threat concepts clearly to engineers, product managers, customers, and leadership alike.
Nice to Have
Experience architecting SOC platforms, MXDR/managed detection services, or attack surface management tooling specifically.
Prior experience in an offensive security context (red team, penetration testing, or adversary simulation) that informs how you think about defensive product design.
Relevant industry certifications (OSCP, CISSP, GCIA, GCTI, or similar).
Experience building or scaling products at a high-growth cybersecurity startup.
What We Offer
The chance to shape the core architecture of a cybersecurity platform used to protect real organizations, from the ground up.
A close-knit, high-trust team where architectural decisions have direct, visible impact.
Competitive compensation, benefits, and growth path commensurate with a principal-level technical role.
A culture built around NopalCyber's mission: making elite, affordable security accessible to every organization, regardless of size.

Work arrangement
No