Birlasoft
Website:
birlasoft.com
Company:
https://www.linkedin.com/company/birlasoft
Seniority: Not Applicable
Industries: IT Services and IT Consulting
Job details:
Area(s) of responsibility
7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.
Required Experience
- 7+ years of Azure Cloud Security experience.
- 5+ years with cloud-native microservices and event-driven architectures.
- Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.
- Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.
Role Summary
The Senior Cloud Native Security & Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.
- Key Responsibilities
- Security Assurance & Architecture Validation
- Lead end-to-end security assurance activities across cloud-native platforms.
- Security assessments of Azure-based applications and microservices.
- Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.
- API security assessment through Azure API Management (APIM).
- Service-to-service authentication and Zero Trust security validation.
- Dapr security controls, mTLS implementation, and secure east-west communication.
- Validation of encryption in transit and at rest.
- Azure Key Vault integration and secrets management reviews.
- Tenant isolation, privacy controls, and data protection assessments.
- Azure Service Bus publisher/consumer authentication and authorization validation.
- Microservices & API Security Testing
- Perform security validation across:
- API, microservices, event, and DevOps layers.
- Authentication, authorization, access control, session management, and input validation.
- API abuse case testing and security misconfiguration reviews.
- Dynamic Application Security Testing (DAST) using tools such as Burp Suite.
- Secure API exposure and enforcement of least-privilege principles.
Click on Apply to know more.
