Description

You will assess, document, and communicate security risks while ensuring compliance with FedRAMP, BSI IT-Grundschutz, and ISO 27001 frameworks across OpenStack, AWS, Azure, and GCP environments.

This role is on-site.

Responsibilities

• Perform security scanning and assessments aligned with international regulatory standards.
• Analyze and validate security controls across multiple cloud providers.
• Apply Terraform, Ansible, and CI/CD pipelines to support secure system design and auditing.
• Communicate risk summaries and actionable recommendations to technical and non-technical stakeholders.
• Refine security assessment methodologies and documentation.

Required Skills

• 3+ years of experience in information security or risk assessments.
• Hands-on experience with Terraform and Ansible.
• Proficiency in Python and Bash scripting.
• Understanding of DevSecOps practices and modern cloud architecture.
• Familiarity with FedRAMP, BSI IT-Grundschutz, or ISO 27001.
• Experience with CI/CD pipelines and container orchestration.
• Strong ability to explain technical issues to a broad audience.

Preferred Skills

• Security certifications such as CISSP or CISA.
• Experience with third-party audits or assessments.
• Knowledge of container security, Kubernetes, and secure coding practices.

Key Skills

Education

Bachelor's degree