Security Assessment Specialist
Madhuri MGermanySENIORPosted 14d ago
FedRAMPBSI IT-GrundschutzISO 27001Information SecurityRisk AssessmentsSecurity Control ValidationInfrastructure AutomationTerraformAnsibleScriptingPythonBashCloud PlatformsOpenStackAWSAzureGCPCloud ArchitectureDevSecOpsModern Deployment MethodologiesCI/CD PipelinesInfrastructure as Code (IaC)Container OrchestrationSecurity ScanningRisk AnalysisCompliance DocumentationCISSPCISAThird-party auditsSecure Coding PracticesApplication Security TestingContainer SecurityKubernetesCloud-Native Technologies
About the Role
We are looking for a Security Assessment Specialist to join our team. This role focuses on assessing security controls and recommending improvements across cloud-hosted environments.
Key Responsibilities
• Assess, document, and communicate security risks and mitigation strategies
• Perform security scanning and assessments aligned with FedRAMP, BSI IT-Grundschutz, and international regulatory frameworks
• Provide actionable recommendations to improve security posture and compliance
• Validate security controls across cloud-hosted environments
• Support secure system design and security auditing using Terraform, Ansible, scripting, and deployment technologies
• Develop and continuously improve security assessment methodologies and documentation
• Communicate findings and risk summaries to technical and non-technical stakeholders
• Collaborate with cross-functional teams to promote a security-first culture
Requirements
• 8+ years of experience in information security, risk assessments, and security control validation
• Experience with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar compliance frameworks
• Strong understanding of cloud security principles and practices
• Proficiency in infrastructure automation with Terraform and Ansible
• Scripting skills in Python and Bash
• Experience with cloud platforms including OpenStack, AWS, Azure, or GCP
• Knowledge of cloud architecture, DevSecOps, and modern deployment methodologies
• Experience with CI/CD pipelines, Infrastructure as Code (IaC), and container orchestration
• Skills in security scanning, risk analysis, and compliance documentation
Preferred Skills
• CISSP, CISA, or other relevant security certifications
• Experience with third-party audits and assessments
• Knowledge of secure coding practices and application security testing
• Experience with container security, Kubernetes, and cloud-native technologies