Junior Security Assessment Specialist

Job Title: Junior Security Assessment Specialist

Location: Remote

Duration: 6 months (Extendable)

Pay Range: $45- 48/Hour on W2/C2C (All Inclusive) Request ID: 111338-1

Key Responsibilities: Collaborate with cross-functional teams to identify, assess, document, and communicate security risks, along with appropriate mitigation strategies. Perform security assessments and scanning activities in alignment with regulatory frameworks such as FedRAMP, BSI IT-Grundschutz, ISO 27001, and other international compliance standards. Provide clear, actionable recommendations to strengthen security posture based on assessment findings, industry best practices, and regulatory requirements. Support the development, enhancement, and maintenance of security assessment methodologies, standards, processes, and documentation. Analyze, validate, and assess security controls across cloud environments, including OpenStack, AWS, Azure, and GCP.Utilize infrastructure automation and Infrastructure-as-Code (IaC) tools such as Terraform and Ansible to evaluate secure deployments and cloud configurations. Apply knowledge of CI/CD pipelines, Python, Bash scripting, containerization, Kubernetes, and DevSecOps practices to support secure system design and auditing activities. Communicate security findings, risk assessments, and remediation plans to both technical and non-technical stakeholders, promoting a strong security-first culture.

Required Qualifications: 8 years of experience in Information Security, Risk Assessment, Security Auditing, Cybersecurity, or a related field. Strong knowledge of compliance and regulatory frameworks including FedRAMP, BSI IT-Grundschutz, ISO 27001, or equivalent standards. Hands-on experience with Terraform, Ansible, Infrastructure-as-Code (IaC), and automation technologies. Proficiency in scripting languages such as Python and Bash. Solid understanding of cloud architecture, DevOps/DevSecOps methodologies, and modern software deployment practices. Experience performing security control assessments, vulnerability analysis, and risk evaluations in cloud environments. Excellent written and verbal communication skills with the ability to present technical concepts to diverse audiences.

Preferred Qualifications: Professional security certifications such as CISSP, CISA, CCSP, or equivalent. Experience supporting or participating in third-party audits, compliance assessments, and regulatory reviews. Knowledge of secure coding practices, application security testing, and vulnerability management. Familiarity with container security, Kubernetes, cloud-native technologies, and security automation frameworks.