Operations Security Specialist- Cloud Operations and Delivery

Tech Talent International•Herndon, VA

4h•Remote

About The Position

Our client a multinational SAP consulting firm is seeking a Operations Security Specialist- Cloud Operations and Delivery to work with a major client in the US on an initial contract basis. The role has strong potential to turn into a permanent role. The Security Specialist is responsible for ensuring the security and integrity of the organization's cloud infrastructure and services. This role involves implementing, monitoring, and managing security measures to protect data, systems, and networks from unauthorized access, vulnerabilities, and threats. The Security Specialist will work closely with cross-functional teams to integrate security best practices into the development and operational processes. This role will be primarily focused on interfacing with other security teams within the organization to ensure streamlined communication and effective processing of security deliverables.

Requirements

Bachelor's degree in Computer Science, Information Security, or a related field.
Minimum of 3-5 years of experience in cloud security, cybersecurity, or a related role.
Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
Experience with security tools and technologies (e.g., firewalls, IDS/IPS, SIEM).
Knowledge of scripting and automation tools for security tasks.
Familiarity with regulatory frameworks and compliance standards.
Excellent problem-solving skills and attention to detail.
Strong communication and interpersonal skills.
Ability to work independently and as part of a team in a fast-paced environment.
Must be US Citizen
Possible convert to hire after 1 year
Must be able to obtain Public Trust clearance

Nice To Haves

Relevant security certifications such as CISSP, CISM, CEH, or AWS Certified Security Specialty are preferred.
Hands-on experience with cloud operations processes and implementations
Strong understanding of cloud infrastructure management, including provisioning, scaling, and maintaining cloud services.
Experience working with cloud service providers such as AWS, Azure, or Google Cloud to deploy and optimize cloud-based applications.
Familiarity with best practices in cloud automation, cost management, and operational monitoring.
Experience in cloud security governance and compliance management
Proven ability to develop, implement, and enforce cloud security policies, ensuring alignment with industry standards and regulatory frameworks such as NIST, CIS, ISO 27001, GDPR, HIPAA, or FedRAMP.
Experience conducting security audits, risk assessments, and compliance reviews to ensure cloud environments meet organizational and legal security requirements.
Ability to work with stakeholders across security, compliance, and operations teams to drive governance initiatives and maintain security posture.

Responsibilities

Develop and implement security policies, protocols, and procedures for cloud environments.
Monitor cloud infrastructure and applications for security breaches and respond promptly to incidents.
Conduct regular security assessments, vulnerability scans, and penetration testing.
Ensure compliance with industry standards, legal requirements, and organizational policies (e.g., GDPR, HIPAA, PCI-DSS).
Identify and assess security risks, developing strategies to mitigate them.
Prepare and maintain documentation related to security practices and compliance efforts.
Work closely with IT, DevOps, and Development teams to ensure security is integrated into all stages of the software development lifecycle.
Provide security training and awareness programs for employees.
Liaise with external partners and vendors to assess the security posture of third-party services and products.
Develop and maintain an incident response plan to manage security incidents effectively.
Investigate and document security breaches, providing detailed reports and recommendations for prevention.
Participate in disaster recovery planning and testing.
Stay current with emerging security trends, threats, and technologies.
Propose improvements to security architecture, tools, and processes.
Evaluate and implement security solutions that enhance the organization's security posture.