Senior Cybersecurity Expert – Cloud & DevSecOps

About the role

We are looking for a hands‑on Senior Cybersecurity Expert to protect our AI‑powered fintech platform and communication services. The role focuses on offensive security, secrets management, and secure engineering within Azure cloud environments.

Key responsibilities

• Hardening Azure tenants: Entra ID, Conditional Access, Defender for Cloud, NSGs, Private Link, Key Vault, policies, and landing‑zone architectures.
• Implementing and managing O365 security: Defender for Office365, DLP, CASB, CloudAPP, CSPM, MDC, MDE, MFA, and PIM.
• Designing, operating, and rotating enterprise key and secret lifecycles using Azure Key Vault, Managed HSM, BYOK/HYOK, and certificate management.
• Deploying Privileged Access Management solutions (CyberArk, BeyondTrust, PAM360 or equivalents) with session recording, JIT/JEA, and credential rotation.
• Integrating security into CI/CD pipelines (Azure DevOps, GitHub Actions, GitLab) with SAST, DAST, SCA, IaC scanning (Terraform/Bicep) and container image scanning.
• Supporting SOC operations and conducting adversarial testing to validate controls.

Required profile

• Senior‑level expertise in cloud security, offensive testing, and secure technical engineering.
• Proven ability to design, implement, and validate security controls in modern cloud‑native environments.
• Hands‑on experience with Azure infrastructure and O365 security stacks.

Required skills

• Azure Cloud security (Defender for Cloud, WAF, NSG, Private Link, Policy & Blueprints).
• Azure AD / Entra ID, Conditional Access, Landing Zone, CIS/Microsoft Cloud Security Benchmark.
• O365 security tools: Defender for Office365, DLP, CASB, CloudAPP, CSPM, MDC, MDE, MFA, PIM.
• Key & secrets management: Azure Key Vault, Managed HSM, BYOK/HYOK, certificate lifecycle, envelope encryption.
• Privileged Access Management platforms: CyberArk, BeyondTrust, PAM360.
• DevSecOps tooling: Azure DevOps, GitHub Actions, GitLab, SAST, DAST, SCA, IaC scanning (Terraform, Bicep), container image scanning.
• SOC operation experience.