Project Lead - Cybersecurity

Experience Required:
7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.
Required Experience
- 7+ years of Azure Cloud Security experience.
- 5+ years with cloud-native microservices and event-driven architectures.
- Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.
- Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.
Role Summary
The Senior Cloud Native Security Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.
- Key Responsibilities
o Security Assurance Architecture Validation
o Lead end-to-end security assurance activities across cloud-native platforms.
o Security assessments of Azure-based applications and microservices.
o Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.
o API security assessment through Azure API Management (APIM).
o Service-to-service authentication and Zero Trust security validation.
o Dapr security controls, mTLS implementation, and secure east-west communication.
o Validation of encryption in transit and at rest.
o Azure Key Vault integration and secrets management reviews.
o Tenant isolation, privacy controls, and data protection assessments.
o Azure Service Bus publisher/consumer authentication and authorization validation.
o Microservices API Security Testing
- Perform security validation across:
o API, microservices, event, and DevOps layers.
o Authentication, authorization, access control, session management, and input validation.
o API abuse case testing and security misconfiguration reviews.
o Dynamic Application Security Testing (DAST) using tools such as Burp Suite.
o Secure API exposure and enforcement of least-privilege principles.

Preferred Qualifications
- Experience with Azure Security Architecture
- Experience validating ACA, Dapr, APIM and Azure Service Bus based solutions
- Knowledge of Enterprise DR and Business Continuity validation practices
- Microsoft Azure Security Certifications preferred
- CISSP / CCSP / Azure Security certifications preferred but not mandatory