Asks for

The ad says“Knowledge of LLM attack vectors · Adversarial ML · AI red teaming · Prompt injection”
The ad says“Knowledge of LLM attack vectors · Adversarial ML · AI red teaming · Prompt injection”
The ad says“Deep, hands-on experience leveraging AI/ML tooling both offensively (red teaming) and defensively (anomaly detection, AI-powered SIEM correlation).”
The ad says“Have worked on Zero trust · API gateway security · Cloud-native · Microservices”
The ad says“Minimum of 10+ years of experience in Application Security is a must.”
The ad says“Experience and hands on with Purple Teaming, ATT&CK mapping · VECTR / Picus · Debrief facilitation · Detection tuning.”
The ad says“Hands-on experience on Burp Suite Pro”
The ad says“Have worked on Zero trust · API gateway security · Cloud-native · Microservices”
The ad says“Strong understanding of modern application stacks: containerized microservices, serverless, GraphQL APIs, OAuth 2.0 / OIDC flows.”
The ad says“Understanding of threat intelligence sources and risk management frameworks (e.g., NIST, CVSS).”
The ad says“Experience integrating security tooling (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines.”
The ad says“Demonstrated ability to design and execute AI-specific attack simulations — prompt injection, data poisoning, model inversion — and build mitigations.”
The ad says“Experience and hands on with Purple Teaming, ATT&CK mapping · VECTR / Picus · Debrief facilitation · Detection tuning.”
The ad says“Strong understanding of modern application stacks: containerized microservices, serverless, GraphQL APIs, OAuth 2.0 / OIDC flows.”
The ad says“Experience with SAST, DAST, IAST, and software composition analysis (SCA)”
The ad says“Knowledge of LLM attack vectors · Adversarial ML · AI red teaming · Prompt injection”
The ad says“Have worked on Zero trust · API gateway security · Cloud-native · Microservices”
The ad says“Demonstrated ability to design and execute AI-specific attack simulations — prompt injection, data poisoning, model inversion — and build mitigations.”
The ad says“Strong knowledge of network and application security, as well as common vulnerabilities and attack vectors.”
The ad says“Understanding of threat intelligence sources and risk management frameworks (e.g., NIST, CVSS).”
The ad says“Strong understanding of modern application stacks: containerized microservices, serverless, GraphQL APIs, OAuth 2.0 / OIDC flows.”
The ad says“Strong understanding of modern application stacks: containerized microservices, serverless, GraphQL APIs, OAuth 2.0 / OIDC flows.”
The ad says“Strong knowledge of OWASP Top 10 and secure coding practices”
The ad says“Secure SDLC and threat modeling (e.g., STRIDE, PASTA)”
The ad says“Experience and hands on with Purple Teaming, ATT&CK mapping · VECTR / Picus · Debrief facilitation · Detection tuning.”
The ad says“Demonstrated ability to design and execute AI-specific attack simulations — prompt injection, data poisoning, model inversion — and build mitigations.”
The ad says“Experience and hands on with Purple Teaming, ATT&CK mapping · VECTR / Picus · Debrief facilitation · Detection tuning.”
The ad says“Understanding of threat intelligence sources and risk management frameworks (e.g., NIST, CVSS).”
The ad says“Experience integrating security tooling (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines.”
The ad says“Experience integrating security tooling (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines.”
The ad says“Strong knowledge of OWASP Top 10 and secure coding practices”
The ad says“Secure SDLC and threat modeling (e.g., STRIDE, PASTA)”
The ad says“Strong understanding of modern application stacks: containerized microservices, serverless, GraphQL APIs, OAuth 2.0 / OIDC flows.”
The ad says“Experience with SAST, DAST, IAST, and software composition analysis (SCA)”
The ad says“Secure SDLC and threat modeling (e.g., STRIDE, PASTA)”
The ad says“Understanding of threat intelligence sources and risk management frameworks (e.g., NIST, CVSS).”
The ad says“Secure SDLC and threat modeling (e.g., STRIDE, PASTA)”
The ad says“Experience and hands on with Purple Teaming, ATT&CK mapping · VECTR / Picus · Debrief facilitation · Detection tuning.”
The ad says“Have worked on Zero trust · API gateway security · Cloud-native · Microservices”

We’re hiring at Pitney Bowes, where top talent builds meaningful careers and lasting impact. We Move fast, Deliver excellence, and Win together…that’s The Pitney Bowes way. Here, how we work matters just as much as what we achieve.

We’re looking for people who:

Act with urgency, accountability, and purpose
Deliver high quality work with consistency and pride
Collaborate effectively and elevate those around them
Focus on outcomes that drive impact and growth

Job Description:

Join Pitney Bowes as Technical Architect

Years of Experience - 10-15 years

Job Location - Noida

Impact

As a Technical Architect, you are expected to take ownership of our application security posture. You will lead and mentor a team of security engineers while architecting defenses against modern, AI-generated attack surfaces. You will build and execute an enterprise-wide strategy centered on proactive AI-driven red teaming, purple team operations, automated threat assessments, and robust application security testing — ensuring our products and platforms remain resilient against today's rapidly evolving adversarial landscape.

The Job

Own and drive the end-to-end application security strategy, including design reviews, threat modelling, and secure SDLC integration across engineering teams.
Lead an AI-augmented red team program — designing adversarial scenarios that simulate AI-generated attacks (LLM prompt injection, adversarial ML, AI-assisted phishing, synthetic exploit generation) and translating findings into hardening roadmaps.
Architect and maintain an AI-driven threat assessment framework to continuously identify, prioritize, and remediate vulnerabilities across web, mobile, API, and cloud-native applications.
Define and govern counter measures against AI-generated attacks, including detection pipelines, model-aware WAF policies, and runtime application self-protection (RASP) strategies.
Perform and oversee advanced application penetration testing and dynamic/static analysis (DAST/SAST) with a focus on high-complexity environments.
Collaborate with product, DevOps, IT and platform engineering to embed security guardrails at every stage of CI/CD pipelines — shift-left and shift-everywhere.
Mentor and guide a team of security engineers; establish technical standards, playbooks, and review processes.
Stay ahead of emerging threat intelligence, particularly adversarial AI research, and adapt defensive strategies accordingly.
Lead collaborative Purple Team exercises to the next level, leveraging AI to provide a wider coverage against blue team defenses, with real-time feedback loops to identify detection gaps.
Facilitate structured debrief sessions after each exercise, driving measurable improvements in SIEM rules, EDR coverage, alert fidelity, and incident response runbooks.

Qualifications & Skills required

Education & Experience:

Bachelor’s degree in computer science, Information Security, or a related field.
Minimum of 10+ years of experience in Application Security is a must.
Proven track record owning application security programs in a complex, multi-stack enterprise environment.
Deep, hands-on experience leveraging AI/ML tooling both offensively (red teaming) and defensively (anomaly detection, AI-powered SIEM correlation).
Demonstrated ability to design and execute AI-specific attack simulations — prompt injection, data poisoning, model inversion — and build mitigations.
Strong understanding of modern application stacks: containerized microservices, serverless, GraphQL APIs, OAuth 2.0 / OIDC flows.
Experience integrating security tooling (SAST, DAST, SCA, secrets scanning) into CI/CD pipelines.
Lead collaborative Purple Team exercises with AI.
Work closely with the SOC, threat intelligence, and incident response teams to ensure purple team findings directly feed into defensive improvements.
Evaluate and deploy purple team platforms (e.g., Safe Breach or custom automation) to scale exercise frequency and reporting.
Guide and upskill red and blue team members in purple teaming methodology — building a culture of continuous adversarial validation.

Technical Skills:

Understanding of threat intelligence sources and risk management frameworks (e.g., NIST, CVSS).
Strong knowledge of network and application security, as well as common vulnerabilities and attack vectors.
Strong knowledge of OWASP Top 10 and secure coding practices
Experience with SAST, DAST, IAST, and software composition analysis (SCA)
Secure SDLC and threat modeling (e.g., STRIDE, PASTA)
Knowledge of LLM attack vectors · Adversarial ML · AI red teaming · Prompt injection
Experience and hands on with Purple Teaming, ATT&CK mapping · VECTR / Picus · Debrief facilitation · Detection tuning.
Have worked on Zero trust · API gateway security · Cloud-native · Microservices
Hands-on experience on Burp Suite Pro

The Team

Pitney Bowes (NYSE: PBI) is a global shipping and mailing company that provides technology, logistics, and financial services to more than 90 percent of the Fortune 500. Small business, retail, enterprise, and government clients around the world rely on Pitney Bowes to remove the complexity of sending mail and parcels. For additional information visit Pitney Bowes at www.pitneybowes.com.

We will:

• Provide the will: opportunity to grow and develop your career
• Offer an inclusive environment that encourages diverse perspectives and ideas
• Deliver challenging and unique opportunities to contribute to the success of a transforming organization
• Offer comprehensive benefits globally (PB Benefits and Wellbeing Programs)

Pitney Bowes is an equal opportunity employer that values diversity and inclusiveness in the workplace.

All interested individuals must apply online.