Project Lead-Cybersecurity

Area(s) of responsibility

Experience Required: 
7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.
Required Experience
•    7+ years of Azure Cloud Security experience.
•    5+ years with cloud-native microservices and event-driven architectures.
•    Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.
•    Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.
Role Summary
The Senior Cloud Native Security & Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.
•    Key Responsibilities
o    Security Assurance & Architecture Validation
o    Lead end-to-end security assurance activities across cloud-native platforms.
o    Security assessments of Azure-based applications and microservices.
o    Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.
o    API security assessment through Azure API Management (APIM).
o    Service-to-service authentication and Zero Trust security validation.
o    Dapr security controls, mTLS implementation, and secure east-west communication.
o    Validation of encryption in transit and at rest.
o    Azure Key Vault integration and secrets management reviews.
o    Tenant isolation, privacy controls, and data protection assessments.
o    Azure Service Bus publisher/consumer authentication and authorization validation.
o    Microservices & API Security Testing
•    Perform security validation across:
o    API, microservices, event, and DevOps layers.
o    Authentication, authorization, access control, session management, and input validation.
o    API abuse case testing and security misconfiguration reviews.
o    Dynamic Application Security Testing (DAST) using tools such as Burp Suite.
o    Secure API exposure and enforcement of least-privilege principles.

Preferred Qualifications
•    Experience with Azure Security Architecture
•    Experience validating ACA, Dapr, APIM and Azure Service Bus based solutions
•    Knowledge of Enterprise DR and Business Continuity validation practices
•    Microsoft Azure Security Certifications preferred
•    CISSP / CCSP / Azure Security certifications preferred but not mandatory