Information Technology Security Analyst

HCL Technologies Limited; United States; On-site; USD 90,000 - 130,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Pharmacy

Life Insurance

Disability Insurance

401(k) retirement plan

Paid time off

HCL EAP

Job summary

HCL Technologies Limited seeks a Security Assessment Specialist to evaluate security postures across systems and applications, ensuring compliance with FedRAMP, IT-Grundschutz, and ISO standards. The role emphasizes collaboration, technical depth, and automation across cloud environments.

You will assess risks, communicate findings, and help mature assessment methodologies while supporting secure design through Terraform, Ansible, and CI/CD practices.

Qualifications

• 3+ years of experience in information security, risk assessments, or related fields.
• Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar frameworks.
• Hands-on experience with infrastructure automation tools (Terraform, Ansible) and scripting languages (Python, Bash).
• Understanding of modern deployment methodologies, cloud architecture, and DevSecOps practices.
• Strong communication skills to explain technical issues to a broad audience.
• Security certifications such as CISSP, CISA, or similar are a plus.

Responsibilities

• Collaborate with cross-functional teams to assess, document, and communicate security risks and mitigation strategies.
• Perform security assessments aligned with FedRAMP, BSI IT-Grundschutz, and other regulatory frameworks.
• Provide actionable recommendations to improve security posture based on findings and best practices.
• Support development and refinement of security assessment methodologies and documentation.
• Analyze and validate security controls across AWS, Azure, GCP, and OpenStack-hosted clouds.
• Apply Terraform, Ansible, and CI/CD tooling to support secure system design and auditing.
• Communicate findings and risk summaries to technical and non-technical stakeholders to drive a security-first culture.

Skills

Information security

Risk assessments

DevSecOps

Cloud security

Regulatory knowledge

Security certifications

Communication

Tools

Terraform

Ansible

Python

Bash

Job description

We are seeking a highly motivated and detail-oriented Security Assessment Specialist to join our Security team. This individual will play a key role in evaluating the security posture of our systems and applications, ensuring compliance with both U.S. and international standards such as FedRAMP and BSI IT-Grundschutz (Germany). The ideal candidate thrives in collaborative environments, brings a strong technical foundation, and is well-versed in modern infrastructure, deployment, and automation technologies.

Key Responsibilities

• Collaborate effectively with cross-functional teams to assess, document, and communicate security risks and mitigation strategies.
• Perform comprehensive security assessments in alignment with FedRAMP, BSI IT-Grundschutz, and other international regulatory frameworks.
• Provide clear, actionable recommendations to improve security posture based on assessment findings, industry best practices, and compliance requirements.
• Support the development and continuous refinement of security assessment methodologies and documentation.
• Analyze and validate security controls across multiple cloud providers like AWS, Azure, GCP, and OpenStack hosted clouds.
• Apply knowledge of Terraform, Ansible, and a broad spectrum of programming and deployment technologies (e.g., CI/CD pipelines, scripting languages, container orchestration, infrastructure-as-code) to support secure system design and auditing.
• Communicate findings and risk summaries to both technical and non-technical stakeholders, helping drive a security-first culture across the organization.

Qualifications

• 3+ years of experience in information security, risk assessments, or related fields.
• Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar regulatory/compliance frameworks.
• Hands-on experience with infrastructure automation tools (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Bash).
• Understanding of modern deployment methodologies, cloud architecture, and DevSecOps practices.
• Strong communication skills with the ability to explain technical issues to a broad audience.
• Security certifications such as CISSP, CISA, or similar are a plus.

Disclaimer

HCL is an equal opportunity employer, committed to providing equal employment opportunities to all applicants and employees regardless of race, religion, sex, color, age, national origin, pregnancy, sexual orientation, physical disability or genetic information, military or veteran status, or any other protected classification, in accordance with federal, state, and/or local law. Should any applicant have concerns about discrimination in the hiring process, they should provide a detailed report of those concerns to [e-mail] for investigation.

Compensation and Benefits

A candidate’s pay within the range will depend on their work location, skills, experience, education, and other factors permitted by law.

This role may also be eligible for performance-based bonuses subject to company policies.

In addition, this role is eligible for the following benefits subject to company policies:

• medical
• dental
• vision
• pharmacy
• life
• accidental death & dismemberment
• disability insurance
• employee assistance program
• 401(k) retirement plan
• 10 days of paid time off per year (some positions are eligible for need-based leave with no designated number of leave days per year)
• 10 paid holidays per year