Information Security Specialist

KellyMitchell Group; Gresham (OR); Hybrid; USD 55,104 - 61,992; Full time

Benefits offered by this job

Medical, Dental & Vision Insurance Plans

Employee-Owned Profit Sharing (ESOP)

401(k) offered

Job summary

KellyMitchell Group is seeking an Information Security Specialist to join their team, focused on identifying vulnerability gaps and assisting in security migrations. This position can be located in various cities including Portland, OR; Minneapolis, MN; and Chicago, IL.

The ideal candidate must have experience with cloud platforms and compliance requirements, alongside familiarity with ITSM tools like ServiceNow. The role offers a competitive pay range and comprehensive benefits package.

Qualifications

• Experience in a regulated or high-availability environment with SLOs/SLAs.
• Hands-on familiarity with observability tooling (logging, metrics, tracing).
• Ability to develop plans to migrate work over.

Responsibilities

• Identify gaps in vulnerability tool inventory.
• Assist in the transition to future state vulnerability scanning services.
• Establish quarterly vulnerability/baseline governance reviews.

Skills

Experience with security, privacy, and compliance

Familiarity with cloud platforms (Azure, AWS)

Experience with ServiceNow for ITSM workflows

Agile certification (CSM/PSPO/SAFe)

Familiarity with responsible AI principles

Tools

Bitsight

Tenable Scanner

Wiz.io Scanner

Job description

Job Summary

Our client is seeking an Information Security Specialist to join their team! This position is located in Portland, OR; Minneapolis, MN; St Louis, MO; Boston, MA; Chicago, IL; Cincinnati OH; Denver, CO; Fargo, ND; Knoxville, TN or Milwaukee, WI.

Core Responsibilities

• Discover vulnerability tool inventory and identify immediate gaps.
• Evaluate and assist in Integration or Migration.
• Discover asset management process and repository for infrastructure, software, cloud, container, identify immediate gaps.
• Discover High Value Asset (HVA/Tier1 Assets) criteria definition, treatment, inventory maintenance process.
• Identify and define managed vulnerability scanning and managed services, contract terms/dates, services provided with acquisition responsibilities.
• Identify current vulnerability remediation performance evaluated against acquisition SLA's.
• Assist in transition to future state vulnerability scanning services and technology integration changes.
• Discover baseline configuration standard definition, management and remediation processes, assist with transition to future state baseline scanning services or integration.
• Identify current critical vulnerability risk issues (issue or root cause management) open or not closed and current remediation state.
• Assist with establishing quarterly vulnerability/baseline governance reviews.
• Assist with integrating into escalation processes.
• Identify tech debt (EOL/OBS assets and Software) current state.
• Identify Secrets (Gitlab) monitoring and remediation Bitsight Identification and Remediation Plan discovery.
• Identify acquisition patch cadence and mitigation workflows.
• Assist in identifying ServiceNow Integration USEM technology data feeds, assignment and remediation workflow development and implementation criteria.

Required Skills/Experience (Must-Haves)

• Experience with security, privacy, and compliance requirements (e.g., SOC 2, PCI) and secure SDLC practices.
• Hands‑on familiarity with cloud platforms (Azure, AWS) and observability tooling (logging, metrics, tracing).
• Experience working in a regulated or high‑availability environment with SLOs/SLAs and incident management.
• Experience using ServiceNow for ITSM workflows (incident, problem, change), reporting, and coordination of release/production readiness activities.
• CSM/PSPO/SAFe or similar Agile certification.
• Familiarity with responsible AI principles and controls (data privacy, security, IP considerations, tool/model approval processes, human‑in‑the‑loop review, and auditability) in enterprise environments.

Preferred Skills/Experience (Nice‑to‑Haves)

• Bitsight Experience.
• Cloud/Container Experience.
• ServiceNow VM/CCM Experience.
• Tenable Scanner Experience.
• Wiz.io Scanner experience.

Key Competencies & Behaviors

• Ability to understand and evaluate risk.
• Comparison of risk towards new acquisitions.
• Develop plans to migrate work over.
• Documentation & Presentation: Visio experience for diagrams and workflows.

Work Environment Location

Portland, OR; Minneapolis, MN; St Louis, MO; Boston, MA; Chicago, IL; Cincinnati OH; Denver, CO; Fargo, ND; Knoxville, TN or Milwaukee, WI.

Hybrid Compensation & Benefits

• Pay Range: The approximate pay range for this position is between $40.00–$45.00 per hour. Final compensation may vary based on factors including but not limited to background, knowledge, skills, and location. We comply with local wage minimums.
• Medical, Dental & Vision Insurance Plans.
• Employee‑Owned Profit Sharing (ESOP).
• 401(k) offered.