Cybersecurity Expert

About Us

Role Summary

• We are seeking a
• hands-on Cybersecurity Engineer
• with deep expertise in
• offensive security, secrets management, and secure platform engineering
• .
• This role focuses on
• advanced technical execution
• , including:
• Azure infrastructure security
• Enterprise-grade Key & Secrets Management (PAM / HSM / Key Vault)
• SOC operation
• Red/Blue team operations
• DevSecOps security integration
• Infrastructure & application-level resilience (DR / security validation)
• The ideal candidate is a
• technical expert
• , capable of designing and implementing security controls, validating them through adversarial testing, and integrating them into modern cloud-native environments.

• Azure Infrastructure Security

• Key & Secrets Management

• Privileged Access Management (PAM)

• Implement and administer PAM platforms (e.g., CyberArk, BeyondTrust, PAM360 or equivalent) — vault design, session isolation/recording, JIT/JEA, credential rotation, and Tier-0 protection for hybrid identities.
• VAPT — Web & APIs
• Lead and execute vulnerability assessments and penetration tests on web applications and REST/GraphQL APIs aligned to OWASP Top 10, ASVS and API Security Top 10; use Burp Suite Pro, ZAP, Nuclei, and produce risk-rated, developer-actionable reports.
• DevSecOps
• Embed security across CI/CD (Azure DevOps / GitHub Actions / GitLab) — SAST, DAST, SCA, IaC scanning (Terraform/Bicep), container & image scanning, secrets detection, and policy-as-code (OPA / Azure Policy).
• SOC — Microsoft Sentinel
• Operate Microsoft Sentinel end-to-end — data connectors, KQL hunting, analytics & UEBA rules, watchlists, SOAR playbooks (Logic Apps), incident triage, MITRE ATT&CK mapping, and threat intelligence integration.

Required Qualifications & Experience

• Education: Bachelor's degree in Computer Science, Information Security, Engineering or a closely related discipline.
• Experience: 5 – 8 years of hands-on experience in cybersecurity engineering or security operations roles within enterprise or service-provider environments.
• Cloud: Demonstrable, production-grade experience securing Microsoft Azure workloads (multi-subscription, hybrid identity, networking).
• Offensive Skills: Proven track record of delivering web and API penetration tests with formal reporting to enterprise stakeholders.
• SOC: Working experience with Microsoft Sentinel and Microsoft Defender XDR, including KQL, analytics rule authoring, and Logic Apps automation.
• Tooling: Practical exposure to PAM (CyberArk / BeyondTrust / PAM360), Key Vault / HSM, Burp Suite Pro, CI/CD security scanners, and IaC tools.