Security Engineer

TalentOla; Atlanta (GA); Presencial; USD 120.000 - 180.000; Tempo integral

Resumo da vaga

Talentola in Atlanta, GA seeks a cybersecurity risk specialist to lead security risk assessments, control evaluations, and remediation initiatives across IT and business units. The role requires deep knowledge of NIST, ISO 27001, CIS Controls, COBIT, and cloud security (AWS/Azure/GCP), plus IAM, secrets management and encryption practices.

You will collaborate with both technical and non-technical stakeholders, support audits and regulatory assessments, and report risks with clear, actionable

Qualificações

• Bachelor's degree or equivalent experience in CS/IS/Engineering.
• 5+ years in cybersecurity, technology risk, information security, risk management or controls governance.
• Experience conducting security risk assessments and control evaluations.
• Experience driving remediation activities to closure of security issues.
• Knowledge of frameworks such as NIST, ISO 27001, CIS Controls, COBIT.
• Understanding of cloud security principles (AWS/Azure/GCP).
• Knowledge of IAM, secrets management, encryption, and key management practices.
• Experience supporting audits, regulatory assessments, or compliance reviews.
• Strong analytical, problem-solving, and communication skills with stakeholders.

Conhecimentos

Security risk assessments

Remediation management

Security frameworks

Cloud security (AWS/Azure/GCP)

IAM & encryption

Audits & regulatory compliance

Stakeholder communication

Analytical problem solving

Formação

Bachelor's degree in Computer Science or related field

Ferramentas

Archer

ServiceNow GRC

MetricStream

Descrição da vaga

Required Qualifications:

• Bachelor's degree in Computer Science, Information Systems, Engineering or related field (equivalent experience)
• 5+ years of experience in cybersecurity, technology risk, information security, risk management, or controls governance
• Experience conducting security risk assessments and control evaluations
• Experience driving remediation activities and managing security issues through closure
• Strong understanding of security frameworks such as NIST, ISO 27001, CIS Controls, COBIT, or similar standards
• Understanding of cloud security principles and common cloud service providers (AWS, Azure, or GCP)
• Knowledge of identity and access management, secrets management, encryption, and key management practices
• Experience supporting audits, regulatory assessments, or compliance reviews
• Strong analytical, problem-solving, and communication skills
• Ability to work effectively with both technical and non-technical stakeholders

Preferred Qualifications:

• Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms (Ethereum, Hyperledger Besu, Canton, Solana, Polygon, etc.)
• Experience with secure software development lifecycle (SDLC) and DevSecOps practices
• Experience with vulnerability management and security testing programs
• Experience with Governance, Risk and Compliance (GRC) platforms such as Archer, ServiceNow GRC, or MetricStream
• Experience developing risk metrics, dashboards and executive reporting
• Familiarity with CI/CD pipelines and cloud-native security controls
• Profession certifications such as: CISSP, CISM, CRISC, CISA, CCSP
• AWS Security Specialty (or equivalent)