App & Infra Security Administrator: Cloud, IAM & Protection

VENUplus Inc.; Orlando, Northern (FL, KY); Hybrid; USD 90,000 - 130,000; Full time

Job summary

VENU+ is seeking an Application Security Administrator to protect applications, cloud platforms, infrastructure, data, and user access. This hands-on role partners with software development, IT operations, vendors, and stakeholders to identify vulnerabilities, strengthen configurations, support secure delivery, stay audit-ready, and respond to security events.

The role has no direct reports and serves as a technical security resource across the technology lifecycle, requiring the ability to

Qualifications

• Bachelor's degree or equivalent practical experience in cybersecurity/IT/CS.
• 4+ years in application security or related fields.
• Solid understanding of secure software development and common weaknesses.

Responsibilities

• Administer and monitor security controls across applications, cloud and data.
• Coordinate vulnerability scanning and remediation tracking.
• Support SAST/DAST and security testing and coordinate with teams.
• Partner with developers to integrate security into SDLC, CI/CD, and release processes.
• Review findings, eliminate false positives, and verify remediation.
• Apply baselines per OWASP, CIS, NIST and vendor standards.
• Support IAM, including MFA and access reviews.
• Monitor alerts and participate in incident response and root cause analysis.
• Maintain security runbooks and audit documentation.

Skills

Strong communication

Documentation

Analytical thinking

Organizational skills

Problem-solving

Discretion

Follow-through

Education

Bachelor's degree in Cybersecurity/IT/CS or related

Tools

SIEM

Vulnerability management

EDR

DLP

CASB

WAF

AppSec testing tools

Job description

VENU+ is seeking an Application Security Administrator to protect applications, cloud platforms, infrastructure, data, and user access. This hands-on role partners with software development, IT operations, vendors, and stakeholders to identify vulnerabilities, strengthen configurations, support secure delivery, stay audit-ready, and respond to security events.

The role has no direct reports and serves as a technical security resource across the technology lifecycle, requiring the ability to