Project Lead-Cybersecurity

Birlasoft; Bengaluru; Hybrid; INR 4,000,000 - 6,000,000; Full time

Job summary

Birlasoft is seeking a Senior Cloud Native Security & Resilience lead to independently assess security and operational readiness of Azure cloud-native apps and event-driven platforms. You will drive security validation across API, microservices, and DevOps layers, ensuring least-privilege and secure communication.

Responsibilities include API security assessment via APIM, JWT/OAuth2 validation, and service-to-service authentication.

Qualifications

• 7+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.
• Proven Azure Cloud Security experience and cloud-native architectures.
• Hands-on with ACA, APIM, Service Bus, Dapr, DevOps, Monitor, Application Insights, and Log Analytics.

Responsibilities

• Lead security assurance and architecture validation across cloud-native platforms.
• Drive end-to-end security assurance activities for Azure-based apps and microservices.
• Validate JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.

Skills

Azure Cloud Security

Cloud-native microservices

Security validation

Resilience testing

DevSecOps

SRE/Platform engineering

ACA (Azure Container Apps)

APIM (Azure API Management)

Azure Service Bus

Dapr

Azure DevOps

Azure Monitor & Application Insights

Log Analytics

Tools

Azure Container Apps (ACA)

Azure API Management (APIM)

Azure Service Bus

Dapr

Azure DevOps

Azure Monitor

Application Insights

Log Analytics

Job description

Experience Required

7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.

Area(s) of responsibility

7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.

Required Experience

• 7+ years of Azure Cloud Security experience.


• 5+ years with cloud-native microservices and event-driven architectures.


• Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.


• Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.

Role Summary

The Senior Cloud Native Security & Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.

• Key Responsibilities


• Security Assurance & Architecture Validation


• Lead end-to-end security assurance activities across cloud-native platforms.


• Security assessments of Azure-based applications and microservices.


• Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.


• API security assessment through Azure API Management (APIM).


• Service-to-service authentication and Zero Trust security validation.


• Dapr security controls, mTLS implementation, and secure east-west communication.


• Validation of encryption in transit and at rest.


• Azure Key Vault integration and secrets management reviews.


• Tenant isolation, privacy controls, and data protection assessments.


• Azure Service Bus publisher/consumer authentication and authorization validation.


• Microservices & API Security Testing


• Perform security validation across:


• API, microservices, event, and DevOps layers.


• Authentication, authorization, access control, session management, and input validation.


• API abuse case testing and security misconfiguration reviews.


• Dynamic Application Security Testing (DAST) using tools such as Burp Suite.


• Secure API exposure and enforcement of least-privilege principles.

Preferred Qualifications

• Experience with Azure Security Architecture


• Experience validating ACA, Dapr, APIM and Azure Service Bus based solutions


• Knowledge of Enterprise DR and Business Continuity validation practices


• Microsoft Azure Security Certifications preferred


• CISSP / CCSP / Azure Security certifications preferred but not mandatory