Cloud/Application Security Specialist (2-4 yrs)

Job Description :

- Bachelor's or Master's degree in Computer Science, Information Systems, Engineering, Information Security, Cybersecurity, or a related field.

Experience :

We are seeking an experienced Cloud/Application Security Specialist with expertise in implementing security controls and threat protection in Azure. The ideal candidate will have a strong background in designing secure IAM concepts, protecting data and applications, and maintaining security posture in cloud and hybrid environments.

Key Responsibilities :

- Implement and manage security controls in Azure cloud environments.

- Design and enforce secure Identity and Access Management (IAM) concepts.

- Protect data, applications, and networks while identifying and remediating vulnerabilities using various security tools.

- Maintain security posture and respond to security incidents as they arise.

- Design and implement security measures within the Software Development Life Cycle (SDLC).

- Conduct application security testing for web and mobile applications, including SAST, DAST, IAST, and SCA.

Specific Technical Knowledge :

- Strong understanding of OWASP/SANS Top 25 concepts and application security flaws.

- Expertise in Azure IaaS and PaaS services and Azure DevOps.

- Hands-on experience with Azure security-related services.

- Proficiency in scripting languages such as PowerShell, ARM Templates, Python, and Terraform.

- Experience securing CI/CD pipelines using Azure DevOps, Jenkins, or Bamboo in Agile and Scrum environments.

- Knowledge of threat modeling, security controls, and common security libraries.

- Familiarity with big data technologies (e.g., Spark, Cassandra, HDFS, Kafka, HBase, ELK stack).

- Experience with containerization technologies like Docker and Kubernetes.

- Understanding of web services and API integrations using REST, SOAP, PHP, HTML, XML, and JSON.

- Familiarity with IAM concepts, federation protocols (SAML, OAuth, OpenID Connect), and tools.

- Knowledge of PKI, Key Management, HSM, Encryption, Tokenization, and X.509 certificates.

Certifications (Preferred) :

- AZ-500 (Microsoft Azure Security Technologies)

- Certified Secure Software Lifecycle Professional (CSSLP)