Remote Cloud Security Assessor | FedRAMP/ISO & Terraform

Pyramid Consulting, Inc; United States; Remote; USD 69,000 - 83,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid sick leave

Job summary

Pyramid Consulting, Inc. is seeking a Security Assessment Specialist for a remote, US-based contract role. You will lead comprehensive security assessments, align findings with international standards, and provide actionable mitigation strategies across multiple cloud environments.

The position emphasizes DevSecOps practices, infrastructure-as-code tooling, and clear communication with both technical and non-technical stakeholders. Remote in the US with long-term potential.

Qualifications

• 3+ years of information security, risk assessments, or related fields.
• Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar frameworks.
• Hands-on experience with infrastructure automation tools (Terraform, Ansible) and scripting languages (Python, Bash).
• Understanding of modern deployment methodologies, cloud architecture, and DevSecOps practices.
• Strong communication skills to explain technical issues to a broad audience.

Responsibilities

• Collaborate with cross-functional teams to assess and communicate security risks and mitigations.
• Perform security assessments aligned with FedRAMP, BSI IT-Grundschutz, and other frameworks.
• Provide actionable recommendations to improve security posture based on findings and standards.
• Support development and refinement of security assessment methodologies and docs.
• Analyze and validate security controls across AWS, Azure, GCP, and OpenStack clouds.
• Apply IaC and automation concepts to support secure design and auditing.

Skills

Information security

Risk assessments

Regulatory compliance

Cloud security

DevSecOps

Tools

Terraform

Ansible

Python

Bash

Job description

Pyramid Consulting, Inc. is seeking a Security Assessment Specialist for a remote, US-based contract role. You will lead comprehensive security assessments, align findings with international standards, and provide actionable mitigation strategies across multiple cloud environments.

The position emphasizes DevSecOps practices, infrastructure-as-code tooling, and clear communication with both technical and non-technical stakeholders. Remote in the US with long-term potential.