Security Assessment Specialist

Pyramid Consulting, Inc; United States; Remote; USD 69,000 - 83,000; Full time

Benefits offered by this job

Health insurance

401(k) plan

Paid sick leave

Job summary

Pyramid Consulting, Inc. is seeking a Security Assessment Specialist for a remote, US-based contract role. You will lead comprehensive security assessments, align findings with international standards, and provide actionable mitigation strategies across multiple cloud environments.

The position emphasizes DevSecOps practices, infrastructure-as-code tooling, and clear communication with both technical and non-technical stakeholders. Remote in the US with long-term potential.

Qualifications

• 3+ years of information security, risk assessments, or related fields.
• Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar frameworks.
• Hands-on experience with infrastructure automation tools (Terraform, Ansible) and scripting languages (Python, Bash).
• Understanding of modern deployment methodologies, cloud architecture, and DevSecOps practices.
• Strong communication skills to explain technical issues to a broad audience.

Responsibilities

• Collaborate with cross-functional teams to assess and communicate security risks and mitigations.
• Perform security assessments aligned with FedRAMP, BSI IT-Grundschutz, and other frameworks.
• Provide actionable recommendations to improve security posture based on findings and standards.
• Support development and refinement of security assessment methodologies and docs.
• Analyze and validate security controls across AWS, Azure, GCP, and OpenStack clouds.
• Apply IaC and automation concepts to support secure design and auditing.

Skills

Information security

Risk assessments

Regulatory compliance

Cloud security

DevSecOps

Tools

Terraform

Ansible

Python

Bash

Job description

Immediate need for a talented Security Assessment Specialist. This is a 06+ Months Contract opportunity with long-term potential and is located in US (Remote).

Job ID:26-31302

Pay Range: $50 - $60/hour. Employee benefits include, but are not limited to, health insurance (medical, dental, vision), 401(k) plan, and paid sick leave (depending on work location).

Key Responsibilities:

• Collaborate effectively with cross-functional teams to assess, document, and communicate security risks and mitigation strategies.
• Perform comprehensive security assessments in alignment with FedRAMP, BSI IT-Grundschutz, and other international regulatory frameworks.
• Provide clear, actionable recommendations to improve security posture based on assessment findings, industry best practices, and compliance requirements.
• Support the development and continuous refinement of security assessment methodologies and documentation.
• Analyze and validate security controls across multiple cloud providers like AWS, Azure, GCP, and OpenStack hosted clouds.
• Apply knowledge of Terraform, Ansible, and a broad spectrum of programming and deployment technologies (e.g., CI/CD pipelines, scripting languages, container orchestration, infrastructure-as-code) to support secure system design and auditing.
• Communicate findings and risk summaries to both technical and non-technical stakeholders, helping drive a security-first culture across the organization.

Key Requirements and Technology Experience:

• 3+ years of experience in information security, risk assessments, or related fields.
• Familiarity with FedRAMP, BSI IT-Grundschutz, ISO 27001, or similar regulatory/compliance frameworks.
• Hands-on experience with infrastructure automation tools (e.g., Terraform, Ansible) and scripting languages (e.g., Python, Bash).
• Understanding of modern deployment methodologies, cloud architecture, and DevSecOps practices.
• Strong communication skills with the ability to explain technical issues to a broad audience.
• Security certifications such as CISSP, CISA, or similar are a plus.
• Experience participating in third-party audits or assessments.
• Knowledge of secure coding practices and application security testing.
• Familiarity with container security, Kubernetes, and cloud-native technologies.

Our client is a leading professional services Industry and we are currently interviewing to fill this and other similar contract positions.

Pyramid Consulting, Inc. provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other characteristic protected by federal, state or local laws.

By applying to our jobs you agree to receive calls, AI-generated calls, text messages, or emails from Pyramid Consulting, Inc. and its affiliates, and contracted partners. Frequency varies for text messages. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages. You can reply STOP to cancel and HELP for help. You can access your privacy policy here.