Job Description

Experience: 5-7 Years
Location: BKC, Mumbai

Key Responsibilities

• Develop, execute, and document cybersecurity verification test cases to validate security requirements, security controls, and compliance obligations, ensuring effective implementation and remediation of identified gaps.
• Create and maintain test plans, test scripts, validation reports, and requirements traceability matrices.
• Perform security control validation across cloud, infrastructure, application, and DevSecOps environments.
• Conduct security testing and validation of application, including code scanning, dependency scanning, and secrets management controls.
• Investigate security incidents, perform root cause analysis, and provide recommendations to improve preventive and detective security controls.
• Ensure compliance with security policies, standards, and regulatory requirements.
• Monitor cloud environments and respond to security incidents and threats.
• Design, implement, and manage Azure cloud security controls and security architecture.
• Collaborate with infrastructure, application, networking, and engineering teams to establish security best practices.
• Automate security monitoring, compliance validation, remediation, and reporting.
• Create security automation scripts using Python, PowerShell, Bash, or similar technologies.
• Drive continuous improvement of security posture through automation and policy enforcement.

Required Skills & Qualifications

• 5-7 years of experience developing and executing cybersecurity test cases, security verification procedures, and control validation activities.
• Strong understanding of cybersecurity requirements, security controls, and validation methodologies across cloud, infrastructure, applications, and DevSecOps environments.
• Experience creating test plans, test scripts, validation reports, and traceability matrices linking security requirements to test results.
• Knowledge of security assessment techniques including vulnerability assessment, penetration testing coordination, configuration reviews, and security control effectiveness testing.
• Strong documentation, analytical, audit, and reporting skills with experience presenting validation findings to technical and non-technical stakeholders.
• Experience implementing DevSecOps in Azure DevOps, GitHub Actions, Jenkins, or equivalent platforms.
• Experience with security scanning tools such as SAST, DAST, SCA, and secrets scanning.
• Strong scripting and automation capabilities using Python, PowerShell, Bash, or automation frameworks.