Job Description
Job Description
Senior Security Assessment Specialist
60 to 65/hr
"Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar regulatory/compliance frameworks.
" Hands-on experience with infrastructure automation tools (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Bash).
" Security certifications such as CISSP, CISA, or similar are a plus.
Role Descriptions: Key Responsibilities: Collaborate effectively with cross-functional teams to assess| document| and communicate security risks and mitigation strategies. Perform the scanning procedures required for the comprehensive security assessments in alignment with FedRAMP| BSI IT-Grundschutz| and other international regulatory frameworks Provide clear| actionable recommendations to improve security posture based on assessment findings| industry best practices| and compliance requirements. Support the development and continuous refinement of security assessment methodologies and documentation. Analyze and validate security controls across multiple cloud providers like OpenStack (AWS| Azure and Eligible to workP also accepted) hosted clouds. Apply knowledge of Terraform| Ansible| and a broad spectrum of programming and deployment technologies (e.g.| CI/CD pipelines| scripting languages| container orchestration| infrastructure-as-code) to support secure system design and auditing. Communicate findings and risk summaries to both technical and non-technical stakeholders| helping drive a security-first culture across the organization. Qualifications: 8 years of experience in information security| risk assessments| or related fields. Familiarity with FedRAMP| BSI IT-Grundschutz| ISO 27001| or similar regulatory/compliance frameworks. Hands-on experience with infrastructure automation tools (e.g.| Terraform| Ansible) and scripting languages (e.g.| Python| Bash). Understanding of modern deployment methodologies| cloud architecture| and DevSecOps practices. Strong communication skills with the ability to explain technical issues to a broad audience. Security certifications such as CISSP| CISA| or similar are a plus. Nice to Have: Experience participating in third-party audits or assessments. Knowledge of secure coding practices and application security testing. Familiarity with container security| Kubernetes| and cloud-native technologies.
Essential Skills: Key Responsibilities: Collaborate effectively with cross-functional teams to assess| document| and communicate security risks and mitigation strategies. Perform the scanning procedures required for the comprehensive security assessments in alignment with FedRAMP| BSI IT-Grundschutz| and other international regulatory frameworks Provide clear| actionable recommendations to improve security posture based on assessment findings| industry best practices| and compliance requirements. Support the development and continuous refinement of security assessment methodologies and documentation. Analyze and validate security controls across multiple cloud providers like OpenStack (AWS| Azure and Eligible to workP also accepted) hosted clouds. Apply knowledge of Terraform| Ansible| and a broad spectrum of programming and deployment technologies (e.g.| CI/CD pipelines| scripting languages| container orchestration| infrastructure-as-code) to support secure system design and auditing. Communicate findings and risk summaries to both technical and non-technical stakeholders| helping drive a security-first culture across the organization. Qualifications: 8 years of experience in information security| risk assessments| or related fields. Familiarity with FedRAMP| BSI IT-Grundschutz| ISO 27001| or similar regulatory/compliance frameworks. Hands-on experience with infrastructure automation tools (e.g.| Terraform| Ansible) and scripting languages (e.g.| Python| Bash). Understanding of modern deployment methodologies| cloud architecture| and DevSecOps practices. Strong communication skills with the ability to explain technical issues to a broad audience. Security certifications such as CISSP| CISA| or similar are a plus. Nice to Have: Experience participating in third-party audits or assessments. Knowledge of secure coding practices and application security testing. Familiarity with container security| Kubernetes| and cloud-native technologies.