Cloud/Application Security Specialist

Job Description : - Bachelor's or Master's degree in Computer Science, Information Systems, Engineering, Information Security, Cybersecurity, or a related field. Experience : We are seeking an experienced Cloud/Application Security Specialist with expertise in implementing security controls and threat protection in Azure. The ideal candidate will have a strong background in designing secure IAM concepts, protecting data and applications, and maintaining security posture in cloud and hybrid environments. Key Responsibilities : - Implement and manage security controls in Azure cloud environments. - Design and enforce secure Identity and Access Management (IAM) concepts. - Protect data, applications, and networks while identifying and remediating vulnerabilities using various security tools. - Maintain security posture and respond to security incidents as they arise. - Design and implement security measures within the Software Development Life Cycle (SDLC). - Conduct application security testing for web and mobile applications, including SAST, DAST, IAST, and SCA. Specific Technical Knowledge : - Strong understanding of OWASP/SANS Top 25 concepts and application security flaws. - Expertise in Azure IaaS and PaaS services and Azure DevOps. - Hands-on experience with Azure security-related services. - Proficiency in scripting languages such as PowerShell, ARM Templates, Python, and Terraform. - Experience securing CI/CD pipelines using Azure DevOps, Jenkins, or Bamboo in Agile and Scrum environments. - Knowledge of threat modeling, security controls, and common security libraries. - Familiarity with big data technologies (e.g., Spark, Cassandra, HDFS, Kafka, HBase, ELK stack). - Experience with containerization technologies like Docker and Kubernetes. - Understanding of web services and API integrations using REST, SOAP, PHP, HTML, XML, and JSON. - Familiarity with IAM concepts, federation protocols (SAML, OAuth, OpenID Connect), and tools. - Knowledge of PKI, Key Management, HSM, Encryption, Tokenization, and X.509 certificates. Certifications (Preferred) : - AZ-500 (Microsoft Azure Security Technologies) - Certified Secure Software Lifecycle Professional (CSSLP) (ref:hirist.tech)

Location: in, IN

Posted Date: 11/23/2024