Apply now »
Country/Region:  IN
Requisition ID:  38304
Work Model: 
Position Type: 
Salary Range: 
Location:  INDIA - BENGALURU - BIRLASOFT OFFICE

Title:  Technical Lead-Testing Services

Description: 

Area(s) of responsibility

7-10+ years in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.

Required Experience

  • 7+ years of Azure Cloud Security experience.
  • 5+ years with cloud-native microservices and event-driven architectures.
  • Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.
  • Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.

Role Summary

The Senior Cloud Native Security & Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.

  • Key Responsibilities
    • Security Assurance & Architecture Validation
    • Lead end-to-end security assurance activities across cloud-native platforms.
    • Security assessments of Azure-based applications and microservices.
    • Validation of JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.
    • API security assessment through Azure API Management (APIM).
    • Service-to-service authentication and Zero Trust security validation.
    • Dapr security controls, mTLS implementation, and secure east-west communication.
    • Validation of encryption in transit and at rest.
    • Azure Key Vault integration and secrets management reviews.
    • Tenant isolation, privacy controls, and data protection assessments.
    • Azure Service Bus publisher/consumer authentication and authorization validation.
    • Microservices & API Security Testing
  • Perform security validation across:
    • API, microservices, event, and DevOps layers.
    • Authentication, authorization, access control, session management, and input validation.
    • API abuse case testing and security misconfiguration reviews.
    • Dynamic Application Security Testing (DAST) using tools such as Burp Suite.
    • Secure API exposure and enforcement of least-privilege principles.

 

Apply now »