Information Security Operations Specialist – Contract

This is a fully remote position, open to applicants in United States.

📋 Description

• Take charge of vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code when relevant.

• Oversee penetration testing and DAST, which includes defining the scope, managing providers and access, reviewing findings, tracking remediation, and conducting retesting.

• Assess and prioritize findings based on severity, exposure, exploitability, and potential business impact.

• Facilitate remediation efforts with Engineering and Infrastructure, confirm closure, and escalate any overdue issues.

• Collaborate with technical teams on security monitoring, logging, identity and access management, secure configuration, incident response, and mitigating technical risks.

• Enhance the skills of Workera teams in vulnerability management, remediation techniques, secure configuration, and security testing.

• Keep security documentation, metrics, remediation logs, and technical response playbooks up to date.

• Manage Vanta tests and maintenance activities pertaining to SOC 2, ISO 27001, and ISO 42001.

• Gather and validate technical evidence, assist in control operation and testing, document exceptions and remediation, and prepare for audits and assessments.

• Lead vendor risk assessments and monitor follow-up actions.

• Offer technical expertise for customer security questionnaires and due diligence inquiries.

• Confirm the accuracy of technical responses and supporting evidence.

• Assist in cross-functional security initiatives, technical readiness activities, and transitions involving systems, tools, and controls.

⛳️ Requirements

• Practical experience in vulnerability management, penetration testing design, security testing, remediation coordination, and technical security operations within a SaaS environment.

• Familiarity with SOC 2, ISO 27001, and ISO 42001 standards.

• Capability to convert control requirements into technical evidence and actionable steps.

• Proficient understanding of OWASP principles and security practices across AWS, Kubernetes, and the Elixir Programming Language.

• Experience utilizing a compliance or security platform such as Vanta.

• Competence to independently interpret Vanta tests, maintenance responsibilities, and evidence requirements.

• Ability to collaborate effectively with Engineering and Infrastructure teams.

• Strong skills in judgment, documentation, prioritization, and communication.

• Comfortable working autonomously as a contractor.

🏝️ Benefits

• Contractor position with a commitment of 40 hours per week.

• Opportunity for remote work.

• An inclusive and respectful workplace culture.

• Equal employment opportunity.