Security Operations Lead — Cloud & SOC 2 (6-Month Project)

On The Spot Development; United States; Remote; USD 110,000 - 150,000; Part time

Job summary

On The Spot Development is building a US-based B2B tech team to enhance information security operations. The Security Operations Specialist will own monitoring, vulnerability management, and security controls across cloud, apps, and APIs, coordinating pen tests and driving remediation with the engineering team.

The role emphasizes collaboration, documentation, and process improvement within a lean team, with a 6-month project horizon and potential extension.

Qualifications

• Proven experience in security monitoring and vulnerability management.
• Experience coordinating penetration testing and following up on findings.
• Practical experience with Cloud Security and frameworks such as SOC 2 and NIST.
• Proactive, independent work style suitable for lean teams; AI tools in security a plus.

Responsibilities

• Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable.
• Coordinate penetration testing engagements and drive remediation of findings.
• Maintain security documentation, metrics, remediation records, and technical response playbooks.
• Review and improve security processes and controls across the engineering organization.
• Support cross-functional security initiatives and transitions involving systems, tooling, and controls.
• Maintain cloud security standards and align with SOC 2 and NIST.
• Partner with technical teams on security monitoring, logging, IAM, secure configuration, incident Response, and risk reduction.

Skills

Vulnerability management

Security monitoring

Penetration testing coordination

Cloud security

SOC 2

NIST

AI tools in security

Education

Job description

On The Spot Development is building a US-based B2B tech team to enhance information security operations. The Security Operations Specialist will own monitoring, vulnerability management, and security controls across cloud, apps, and APIs, coordinating pen tests and driving remediation with the engineering team.

The role emphasizes collaboration, documentation, and process improvement within a lean team, with a 6-month project horizon and potential extension.