Mandatory Technical Skills:

Strong knowledge of network security protocols, best practices, and per meter security tools
Strong knowledge of identity and access management controls, including SAML and OAUTH/OIDC based authentication, Active Directory, and role mapping
Understanding of common security control solutions for event logging, remote access, endpoint management, and mobile device management
Understanding of common data protect on technologies such as cryptography, tokenization, and hashing

Additional Technical Skills:

Understanding of Azure native security services and best practices
Strong knowledge of threat modelling and risk assessment technologies or frameworks

Non-technical skills:

Architecture Skills

The candidate shall have the experience on developing secure view of architecture and secure design documents for different applications

Ability to lead the exercise of collecting the required data to produce the deliverables
Ability to articulate the requirements in technical and non-technical language
Ability to defend secure design and support it with real-life scenarios
Ability to articulate the risk and findings in business language

Explain vulnerabilities and threats

Threat modelling

Recent attacks

Application Security Focus Areas

1. Secure Code Development

2. Secure SDLC

A. Secure Agile development

B. Testing Security requirements

C. Writing security stories

3. Web Application Security

A. Owasp 10

4. SAST and DAST Scan

5. API Security

6. Cl/ CD pipeline

A. Integrate security tools

B. Security testing

Cloud Security Focus Area

1. Shared Responsibility model

2. Secure services in the cloud

3. Infrastructure security in the cloud

A. Secure boundaries

B. Authentication & Authorization

C. security services in the Cloud

4. Cloud Native VS Third party security capabilities

5. Container Security

A. Container security lifecycle

B. Image scanning

Vsolutions Technologies