Operations Security Specialist- Cloud Operations and Delivery

Software International•Herndon, VA

13d•$70 - $80•Remote

About The Position

The Security Specialist is responsible for ensuring the security and integrity of the organization's cloud infrastructure and services. This role involves implementing, monitoring, and managing security measures to protect data, systems, and networks from unauthorized access, vulnerabilities, and threats. The Security Specialist will work closely with cross-functional teams to integrate security best practices into the development and operational processes. This role will be primarily focused on interfacing with other security teams within the organization to ensure streamlined communication and effective processing of security deliverables.

Requirements

Education and Experience:
Bachelor's degree in Computer Science, Information Security, or a related field.
Minimum of 3-5 years of experience in cloud security, cybersecurity, or a related role.
Technical Skills:
Strong understanding of cloud platforms such as AWS, Azure, or Google Cloud.
Experience with security tools and technologies (e.g., firewalls, IDS/IPS, SIEM).
Knowledge of scripting and automation tools for security tasks.
Familiarity with regulatory frameworks and compliance standards.
Certifications:
Relevant security certifications such as CISSP, CISM, CEH, or AWS Certified Security Specialty are preferred.
Soft Skills:
Excellent problem-solving skills and attention to detail.
Strong communication and interpersonal skills.
Ability to work independently and as part of a team in a fast-paced environment.

Nice To Haves

Hands-on experience with cloud operations processes and implementations
Strong understanding of cloud infrastructure management, including provisioning, scaling, and maintaining cloud services.
Experience working with cloud service providers such as AWS, Azure, or Google Cloud to deploy and optimize cloud-based applications.
Familiarity with best practices in cloud automation, cost management, and operational monitoring.
Experience in cloud security governance and compliance management
Proven ability to develop, implement, and enforce cloud security policies, ensuring alignment with industry standards and regulatory frameworks such as NIST, CIS, ISO 27001, GDPR, HIPAA, or FedRAMP.
Experience conducting security audits, risk assessments, and compliance reviews to ensure cloud environments meet organizational and legal security requirements.
Ability to work with stakeholders across security, compliance, and operations teams to drive governance initiatives and maintain security posture.

Responsibilities

Security Management:
Develop and implement security policies, protocols, and procedures for cloud environments.
Monitor cloud infrastructure and applications for security breaches and respond promptly to incidents.
Conduct regular security assessments, vulnerability scans, and penetration testing.
Compliance and Risk Management:
Ensure compliance with industry standards, legal requirements, and organizational policies (e.g., GDPR, HIPAA, PCI-DSS).
Identify and assess security risks, developing strategies to mitigate them.
Prepare and maintain documentation related to security practices and compliance efforts.
Collaboration and Communication:
Work closely with IT, DevOps, and Development teams to ensure security is integrated into all stages of the software development lifecycle.
Provide security training and awareness programs for employees.
Liaise with external partners and vendors to assess the security posture of third-party services and products.
Incident Response:
Develop and maintain an incident response plan to manage security incidents effectively.
Investigate and document security breaches, providing detailed reports and recommendations for prevention.
Participate in disaster recovery planning and testing.
Continuous Improvement:
Stay current with emerging security trends, threats, and technologies.
Propose improvements to security architecture, tools, and processes.
Evaluate and implement security solutions that enhance the organization's security posture.