Junior Security Assessment Specialist

Junior Security Assessment SpecialistCollaborate effectively with cross-functional teams to assess, document, and communicate security risks and mitigation strategies. Hands-on experience with infrastructure automation tools (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Bash). Security certifications such as CISSP, CISA, or similar are a plus.Key Responsibilities:Collaborate effectively with cross-functional teams to assess, document, and communicate security risks and mitigation strategies.Perform the scanning procedures required for the comprehensive security assessments in alignment with FedRAMP, BSI IT-Grundschutz, and other international regulatory frameworks. Provide clear, actionable recommendations to improve security posture based on assessment findings, industry best practices, and compliance requirements.Support the development and continuous refinement of security assessment methodologies and documentation.Analyze and validate security controls across multiple cloud providers like OpenStack (AWS, Azure, and GCP also accepted) hosted clouds.Apply knowledge of Terraform, Ansible, and a broad spectrum of programming and deployment technologies (e.g., CI/CD pipelines, scripting languages, container orchestration, infrastructure-as-code) to support secure system design and auditing.Communicate findings and risk summaries to both technical and non-technical stakeholders, helping drive a security-first culture across the organization.Qualifications: 3+ years of experience in information security, risk assessments, or related fields.Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar regulatory/compliance frameworks.Hands-on experience with infrastructure automation tools (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Bash). Understanding of modern deployment methodologies, cloud architecture, and DevSecOps practices.Strong communication skills with the ability to explain technical issues to a broad audience.Security certifications such as CISSP, CISA, or similar are a plus.Experience participating in third-party audits or assessments.Knowledge of secure coding practices and application security testing.Familiarity with container security, Kubernetes, and cloud-native technologies.Company Benefits & Culture:Inclusive and diverse work environmentOpportunities for professional growth and developmentComprehensive health and wellness benefitsAppreciate your quick response and please feel free to reach me out for any query you may have. Thanks