Project Lead-Cybersecurity

Area(s) of responsibility

Experience Required:  7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance. Required Experience •  7+ years of Azure Cloud Security experience. •  5+ years with cloud-native microservices and event-driven architectures. •  Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments. •  Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.

Role Summary

The Senior Cloud Native Security & Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms. •  Key Responsibilities  o  Security Assurance & Architecture Validation  o  Lead end-to-end security assurance activities across cloud-native platforms.  o  Security assessments of Azure-based applications and microservices.  o  Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.  o  API security assessment through Azure API Management (APIM).  o  Service-to-service authentication and Zero Trust security validation.  o  Dapr security controls, mTLS implementation, and secure east-west communication.  o  Validation of encryption in transit and at rest.  o  Azure Key Vault integration and secrets management reviews.  o  Tenant isolation, privacy controls, and data protection assessments.  o  Azure Service Bus publisher/consumer authentication and authorization validation.  o  Microservices & API Security Testing •  Perform security validation across:  o  API, microservices, event, and DevOps layers.  o  Authentication, authorization, access control, session management, and input validation.  o  API abuse case testing and security misconfiguration reviews.  o  Dynamic Application Security Testing (DAST) using tools such as Burp Suite.  o  Secure API exposure and enforcement of least-privilege principles.

Preferred Qualifications •  Experience with Azure Security Architecture •  Experience validating ACA, Dapr, APIM and Azure Service Bus based solutions •  Knowledge of Enterprise DR and Business Continuity validation practices •  Microsoft Azure Security Certifications preferred •  CISSP / CCSP / Azure Security certifications preferred but not mandatory