Key Responsibilities

Develop, execute, and document cybersecurity verification test cases to validate security requirements, security controls, and compliance obligations, ensuring effective implementation and remediation of identified gaps.
Create and maintain test plans, test scripts, validation reports, and requirements traceability matrices.
Perform security control validation across cloud, infrastructure, application, and DevSecOps environments.
Conduct security testing and validation of application, including code scanning, dependency scanning, and secrets management controls.
Investigate security incidents, perform root cause analysis, and provide recommendations to improve preventive and detective security controls.
Ensure compliance with security policies, standards, and regulatory requirements.
Monitor cloud environments and respond to security incidents and threats.
Design, implement, and manage Azure cloud security controls and security architecture.
Collaborate with infrastructure, application, networking, and engineering teams to establish security best practices.
Automate security monitoring, compliance validation, remediation, and reporting.
Create security automation scripts using Python, PowerShell, Bash, or similar technologies.
Drive continuous improvement of security posture through automation and policy enforcement.

Required Skills & Qualifications

5-7 years of experience developing and executing cybersecurity test cases, security verification procedures, and control validation activities.
Strong understanding of cybersecurity requirements, security controls, and validation methodologies across cloud, infrastructure, applications, and DevSecOps environments.
Experience creating test plans, test scripts, validation reports, and traceability matrices linking security requirements to test results.
Knowledge of security assessment techniques including vulnerability assessment, penetration testing coordination, configuration reviews, and security control effectiveness testing.
Strong documentation, analytical, audit, and reporting skills with experience presenting validation findings to technical and non-technical stakeholders.
Experience implementing DevSecOps in Azure DevOps, GitHub Actions, Jenkins, or equivalent platforms.
Experience with security scanning tools such as SAST, DAST, SCA, and secrets scanning.
Strong scripting and automation capabilities using Python, PowerShell, Bash, or automation frameworks.