Senior Security Assessment Specialist

Senior Security Assessment Specialist

60 to 65/hr

• Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar regulatory/compliance frameworks.
• Hands-on experience with infrastructure automation tools (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Bash).
• Security certifications such as CISSP, CISA, or similar are a plus.

Role Descriptions: Key Responsibilities: Collaborate effectively with cross-functional teams to assess| document| and communicate security risks and mitigation strategies. Perform the scanning procedures required for the comprehensive security assessments in alignment with FedRAMP| BSI IT-Grundschutz| and other international regulatory frameworks Provide clear| actionable recommendations to improve security posture based on assessment findings| industry best practices| and compliance requirements. Support the development and continuous refinement of security assessment methodologies and documentation. Analyze and validate security controls across multiple cloud providers like OpenStack (AWS| Azure and Eligible to workP also accepted) hosted clouds. Apply knowledge of Terraform| Ansible| and a broad spectrum of programming and deployment technologies (e.g.| CI/CD pipelines| scripting languages| container orchestration| infrastructure-as-code) to support secure system design and auditing. Communicate findings and risk summaries to both technical and non-technical stakeholders| helping drive a security-first culture across the organization. Qualifications: 8+ years of experience in information security| risk assessments| or related fields. Familiarity with FedRAMP| BSI IT-Grundschutz| ISO 27001| or similar regulatory/compliance frameworks. Hands-on experience with infrastructure automation tools (e.g.| Terraform| Ansible) and scripting languages (e.g.| Python| Bash). Understanding of modern deployment methodologies| cloud architecture| and DevSecOps practices. Strong communication skills with the ability to explain technical issues to a broad audience. Security certifications such as CISSP| CISA| or similar are a plus. Nice to Have: Experience participating in third-party audits or assessments. Knowledge of secure coding practices and application security testing. Familiarity with container security| Kubernetes| and cloud-native technologies.

Essential Skills: Key Responsibilities: Collaborate effectively with cross-functional teams to assess| document| and communicate security risks and mitigation strategies. Perform the scanning procedures required for the comprehensive security assessments in alignment with FedRAMP| BSI IT-Grundschutz| and other international regulatory frameworks Provide clear| actionable recommendations to improve security posture based on assessment findings| industry best practices| and compliance requirements. Support the development and continuous refinement of security assessment methodologies and documentation. Analyze and validate security controls across multiple cloud providers like OpenStack (AWS| Azure and Eligible to workP also accepted) hosted clouds. Apply knowledge of Terraform| Ansible| and a broad spectrum of programming and deployment technologies (e.g.| CI/CD pipelines| scripting languages| container orchestration| infrastructure-as-code) to support secure system design and auditing. Communicate findings and risk summaries to both technical and non-technical stakeholders| helping drive a security-first culture across the organization. Qualifications: 8+ years of experience in information security| risk assessments| or related fields. Familiarity with FedRAMP| BSI IT-Grundschutz| ISO 27001| or similar regulatory/compliance frameworks. Hands-on experience with infrastructure automation tools (e.g.| Terraform| Ansible) and scripting languages (e.g.| Python| Bash). Understanding of modern deployment methodologies| cloud architecture| and DevSecOps practices. Strong communication skills with the ability to explain technical issues to a broad audience. Security certifications such as CISSP| CISA| or similar are a plus. Nice to Have: Experience participating in third-party audits or assessments. Knowledge of secure coding practices and application security testing. Familiarity with container security| Kubernetes| and cloud-native technologies.

Disclaimer: Diverse Lynx LLC is an Equal Opportunity Employer. All applicants and employees are evaluated without discrimination, based solely on their qualifications, ability, competence and performance. This email and its attachments may contain confidential or proprietary information and is intended only for the recipient(s). If you received this message in error, please disregard it and notify the sender. If you no longer wish to receive our communications, you may unsubscribe at any time.

Security Notice: Our official website is www.diverselynx.com We do not operate or authorize any other websites representing Diverse Lynx LLC.