Birlasoft Limited

View company page ↗

Project Lead-Cybersecurity

🗓️ Posted 2026-10-08 Bengaluru, Karnataka, India Full-time On-site General

💰 Salary Not shared 📊 Market NA

About the Company

Navigating Change. Powering Progress. Reimagining the Future with Birlasoft Birlasoft, a powerhouse where domain expertise, enterprise solutions, and digital technologies converge to redefine business processes. We take pride in our consultative and design thinking approach, driving societal progress by enabling our customers to run businesses with unmatched efficiency and innovation. As part of the CKA Birla Group, a multibillion-dollar enterprise, we boast a 12,000+ professional team committed to upholding the Group's 170-year legacy. Our core values prioritize Diversity, Equity, and Inclusion (DEI) initiatives, along with Corporate Social Responsibility (CSR) activities, demonstrating our dedication to building inclusive and sustainable communities. Join us in shaping a future where technology seamlessly aligns with purpose. For further information, visit www.birlasoft.com IT Services and IT Consulting Specialties: Enterprise Application Services, Application Development and Migration, Quality Assurance and Testing Services, ERP and CRM Services, Mobility Services, Advanced Analytics Services, Cloud Services, Content Management Solutions, Integrated Management Services, Testing as a Service, Infastructure Management, Digital Technologies, BFSI, Manufacturing, Energy & Utilities, Life Sciences, Digital Transformation, Cloud Transformation, Artificial Intelligence

About the Role

The Senior Cloud Native Security & Resilience Assurance Lead is responsible for independently assessing and validating the security, resilience, recoverability, reliability, observability, and operational readiness of Azure cloud-native applications and event-driven platforms.

Responsibilities

● Lead end-to-end security assurance activities across cloud-native platforms.
● Conduct security assessments of Azure-based applications and microservices.
● Validate JWT, OAuth2/OIDC, Azure AD, RBAC, and token-based authentication controls.
● Perform API security assessment through Azure API Management (APIM).
● Validate service-to-service authentication and Zero Trust security.
● Validate Dapr security controls, mTLS implementation, and secure east-west communication.
● Validate encryption in transit and at rest.
● Review Azure Key Vault integration and secrets management.
● Assess tenant isolation, privacy controls, and data protection.
● Validate Azure Service Bus publisher/consumer authentication and authorization.
● Perform security validation across API, microservices, event, and DevOps layers.
● Test authentication, authorization, access control, session management, and input validation.
● Conduct API abuse case testing and security misconfiguration reviews.
● Perform Dynamic Application Security Testing (DAST) using tools such as Burp Suite.
● Ensure secure API exposure and enforcement of least-privilege principles.

Requirements

● 7-10+ years of experience in Cybersecurity, Cloud Security, Security Architecture, DevSecOps, SRE, Platform Engineering, or Resilience Assurance.
● 7+ years of Azure Cloud Security experience.
● 5+ years of experience with cloud-native microservices and event-driven architectures.
● Proven expertise in security validation, resilience testing, disaster recovery assurance, and operational readiness assessment for distributed cloud environments.
● Hands-on experience with Azure Container Apps (ACA), Azure API Management (APIM), Azure Service Bus, Dapr, Azure DevOps, Azure Monitor, Application Insights, and Log Analytics.
● Experience with Azure Security Architecture is preferred.
● Experience validating ACA, Dapr, APIM, and Azure Service Bus-based solutions is preferred.
● Knowledge of Enterprise DR and Business Continuity validation practices is preferred.
● Microsoft Azure Security Certifications are preferred.
● CISSP / CCSP / Azure Security certifications are preferred but not mandatory.