Security Assessment Specialist

Key Responsibilities

• Collaborate effectively with cross-functional teams to assess, document, and communicate security risks and mitigation strategies.
• Perform comprehensive security assessments in alignment with FedRAMP, BSI IT-Grundschutz, and other international regulatory frameworks.
• Provide clear, actionable recommendations to improve security posture based on assessment findings, industry best practices, and compliance requirements.
• Support the development and continuous refinement of security assessment methodologies and documentation.
• Analyze and validate security controls across multiple cloud providers like AWS, Azure, Google Cloud Platform, and OpenStack hosted clouds.
• Apply knowledge of Terraform, Ansible, and a broad spectrum of programming and deployment technologies (e.g., CI/CD pipelines, scripting languages, container orchestration, infrastructure-as-code) to support secure system design and auditing.
• Communicate findings and risk summaries to both technical and non-technical stakeholders, helping drive a security-first culture across the organization.

Key Requirements and Technology Experience

• 3+ years of experience in information security, risk assessments, or related fields.
• Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar regulatory/compliance frameworks.
• Hands-on experience with infrastructure automation tools (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Bash).
• Understanding of modern deployment methodologies, cloud architecture, and DevSecOps practices.
• Strong communication skills with the ability to explain technical issues to a broad audience.
• Security certifications such as CISSP, CISA, or similar are a plus.
• Experience participating in third-party audits or assessments.
• Knowledge of secure coding practices and application security testing.
• Familiarity with container security, Kubernetes, and cloud-native technologies.