Senior Security Assessment Specialist

Senior Security Assessment Specialist
60 to 65/hr

Familiarity with FedRAMP BSI IT-Grundschutz ISO 27001 or similar regulatory/compliance frameworks.
Hands-on experience with infrastructure automation tools (e.g. Terraform Ansible) and scripting languages (e.g. Python Bash).
Security certifications such as CISSP CISA or similar are a plus.


Role Descriptions: Key Responsibilities: Collaborate effectively with cross-functional teams to assess document and communicate security risks and mitigation strategies. Perform the scanning procedures required for the comprehensive security assessments in alignment with FedRAMP BSI IT-Grundschutz and other international regulatory frameworks Provide clear actionable recommendations to improve security posture based on assessment findings industry best practices and compliance requirements. Support the development and continuous refinement of security assessment methodologies and documentation. Analyze and validate security controls across multiple cloud providers like OpenStack (AWS Azure and Eligible to workP also accepted) hosted clouds. Apply knowledge of Terraform Ansible and a broad spectrum of programming and deployment technologies (e.g. CI/CD pipelines scripting languages container orchestration infrastructure-as-code) to support secure system design and auditing. Communicate findings and risk summaries to both technical and non-technical stakeholders helping drive a security-first culture across the organization. Qualifications: 8 years of experience in information security risk assessments or related fields. Familiarity with FedRAMP BSI IT-Grundschutz ISO 27001 or similar regulatory/compliance frameworks. Hands-on experience with infrastructure automation tools (e.g. Terraform Ansible) and scripting languages (e.g. Python Bash). Understanding of modern deployment methodologies cloud architecture and DevSecOps practices. Strong communication skills with the ability to explain technical issues to a broad audience. Security certifications such as CISSP CISA or similar are a plus. Nice to Have: Experience participating in third-party audits or assessments. Knowledge of secure coding practices and application security testing. Familiarity with container security Kubernetes and cloud-native technologies.
Essential Skills: Key Responsibilities: Collaborate effectively with cross-functional teams to assess document and communicate security risks and mitigation strategies. Perform the scanning procedures required for the comprehensive security assessments in alignment with FedRAMP BSI IT-Grundschutz and other international regulatory frameworks Provide clear actionable recommendations to improve security posture based on assessment findings industry best practices and compliance requirements. Support the development and continuous refinement of security assessment methodologies and documentation. Analyze and validate security controls across multiple cloud providers like OpenStack (AWS Azure and Eligible to workP also accepted) hosted clouds. Apply knowledge of Terraform Ansible and a broad spectrum of programming and deployment technologies (e.g. CI/CD pipelines scripting languages container orchestration infrastructure-as-code) to support secure system design and auditing. Communicate findings and risk summaries to both technical and non-technical stakeholders helping drive a security-first culture across the organization. Qualifications: 8 years of experience in information security risk assessments or related fields. Familiarity with FedRAMP BSI IT-Grundschutz ISO 27001 or similar regulatory/compliance frameworks. Hands-on experience with infrastructure automation tools (e.g. Terraform Ansible) and scripting languages (e.g. Python Bash). Understanding of modern deployment methodologies cloud architecture and DevSecOps practices. Strong communication skills with the ability to explain technical issues to a broad audience. Security certifications such as CISSP CISA or similar are a plus. Nice to Have: Experience participating in third-party audits or assessments. Knowledge of secure coding practices and application security testing. Familiarity with container security Kubernetes and cloud-native technologies.