This role focuses on independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.

Key responsibilities include leading end-to-end security assurance activities across cloud-native platforms, performing security assessments of Azure-based applications and microservices, and validating various security controls.

The position requires a deep understanding of microservices and API security testing across multiple layers, including authentication, authorization, and access control.

Lead comprehensive security assurance and architecture validation for cloud-native platforms.

Conduct thorough security assessments of Azure applications and microservices, including JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication.

Validate API security through Azure API Management (APIM), service-to-service authentication, and Zero Trust principles.

Ensure secure communication via Dapr, mTLS, and validate encryption at rest and in transit, along with Azure Key Vault integration.

Perform security validation across API, microservices, event, and DevOps layers, focusing on authentication, authorization, and input validation.

Execute API abuse case testing, security misconfiguration reviews, and Dynamic Application Security Testing (DAST) using tools like Burp Suite.

A minimum of 7-10 years of experience in Cybersecurity, with significant expertise in Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.

Requires 7+ years of direct Azure Cloud Security experience and 5+ years working with cloud-native microservices and event-driven architectures.

Demonstrated ability in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments is essential.

Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics is mandatory.