Project Lead-Cybersecurity

Birlasoft; India; On-site; INR 3,000,000 - 4,500,000; Full time

Job summary

Birlasoft in Bengaluru is seeking a Senior Cloud Native Security & Resilience Assurance Lead to independently assess and validate the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.

You will lead end-to-end security assurance activities across cloud-native platforms, validate JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls, and perform API security assessments

Qualifications

• 7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.
• 7+ years of Azure Cloud Security experience.
• 5+ years with cloud-native microservices and event-driven architectures.
• Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.
• Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.

Responsibilities

• Security Assurance & Architecture Validation
• Lead end-to-end security assurance activities across cloud-native platforms.
• Security assessments of Azure-based applications and microservices.
• Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.
• API security assessment through Azure API Management (APIM).
• Service-to-service authentication and Zero Trust security validation.
• Dapr security controls, mTLS implementation, and secure east-west communication.
• Validation of encryption in transit and at rest.
• Azure Key Vault integration and secrets management reviews.
• Tenant isolation, privacy controls, and data protection assessments.
• Azure Service Bus publisher/consumer authentication and authorization validation.
• Microservices & API Security Testing
• Perform security validation across: API, microservices, event, and DevOps layers.
• Authentication, authorization, access control, session management, and input validation.
• API abuse case testing and security misconfiguration reviews.
• DAST using Burp Suite.
• Secure API exposure and enforcement of least-privilege principles.

Skills

Azure Cloud Security

Security Architecture

DevSecOps

SRE

Platform Engineering

Tools

Azure DevOps

Azure Monitor

Application Insights

Log Analytics

ACA

APIM

Job description

Select how often (in days) to receive an alert:

Location: INDIA - BENGALURU - BIRLASOFT OFFICE

Description:

Area(s) of responsibility

Experience Required

• 7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.
• 7+ years of Azure Cloud Security experience.
• 5+ years with cloud-native microservices and event-driven architectures.
• Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.
• Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.

Role Summary

The Senior Cloud Native Security & Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.

Key Responsibilities

• Security Assurance & Architecture Validation
• Lead end-to-end security assurance activities across cloud-native platforms.
• Security assessments of Azure-based applications and microservices.
• Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.
• API security assessment through Azure API Management (APIM).
• Service-to-service authentication and Zero Trust security validation.
• Dapr security controls, mTLS implementation, and secure east-west communication.
• Validation of encryption in transit and at rest.
• Azure Key Vault integration and secrets management reviews.
• Tenant isolation, privacy controls, and data protection assessments.
• Azure Service Bus publisher/consumer authentication and authorization validation.
• Microservices & API Security Testing
• Perform security validation across:
• API, microservices, event, and DevOps layers.
• Authentication, authorization, access control, session management, and input validation.
• API abuse case testing and security misconfiguration reviews.
• Dynamic Application Security Testing (DAST) using tools such as Burp Suite.
• Secure API exposure and enforcement of least-privilege principles.

Preferred Qualifications

• Experience with Azure Security Architecture
• Experience validating ACA, Dapr, APIM and Azure Service Bus based solutions
• Knowledge of Enterprise DR and Business Continuity validation practices
• Microsoft Azure Security Certifications preferred
• CISSP / CCSP / Azure Security certifications preferred but not mandatory