Security operations specialist in cybersecurity

On The Spot Development; United States; Remote; USD 110,000 - 150,000; Part time

Job summary

On The Spot Development is building a US-based B2B tech team to enhance information security operations. The Security Operations Specialist will own monitoring, vulnerability management, and security controls across cloud, apps, and APIs, coordinating pen tests and driving remediation with the engineering team.

The role emphasizes collaboration, documentation, and process improvement within a lean team, with a 6-month project horizon and potential extension.

Qualifications

• Proven experience in security monitoring and vulnerability management.
• Experience coordinating penetration testing and following up on findings.
• Practical experience with Cloud Security and frameworks such as SOC 2 and NIST.
• Proactive, independent work style suitable for lean teams; AI tools in security a plus.

Responsibilities

• Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable.
• Coordinate penetration testing engagements and drive remediation of findings.
• Maintain security documentation, metrics, remediation records, and technical response playbooks.
• Review and improve security processes and controls across the engineering organization.
• Support cross-functional security initiatives and transitions involving systems, tooling, and controls.
• Maintain cloud security standards and align with SOC 2 and NIST.
• Partner with technical teams on security monitoring, logging, IAM, secure configuration, incident Response, and risk reduction.

Skills

Vulnerability management

Security monitoring

Penetration testing coordination

Cloud security

SOC 2

NIST

AI tools in security

Education

Job description

Описание:

We are building a local Polish team for a customer who is a US-based B2B technology company. They develop an AI-powered skills assessment and workforce development platform. It helps enterprises assess employees’ and candidates’ capabilities, identify skill gaps, and guide development across areas such as AI, data, and technology. Companies use these insights to support hiring, upskilling, and workforce planning. We are looking for a Security Operations Specialist to take ownership of information security operations and collaborate closely with the engineering team to ensure robust security practices are in place.

Задачи:

Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable; Coordinate penetration testing engagements and drive the remediation of identified findings; Maintain security documentation, metrics, remediation records, and technical response playbooks; Review and improve security processes and controls across the entire engineering organization; Support cross-functional security initiatives, technical readiness efforts, and transitions involving systems, tooling, and controls; Maintain cloud security standards and align processes with security frameworks such as SOC 2 and NIST; Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction.

Требования:

Proven experience in security monitoring and vulnerability management; Experience coordinating penetration testing and following up on findings; Practical experience with Cloud Security and industry frameworks such as SOC 2 and NIST; Proactive approach with the ability to work independently, prioritize tasks, and deliver results in a lean team environment. Будет плюсом: Hands-on experience using AI tools to enhance security operations and streamline workflows

Условия:

This is a 6-month project role, with a potential possibility of extention. The role requires working closely with the US team, with working hours overlapping until 10:00 PM Warsaw time. At On The Spot, we’re creating a workplace people would want to stay in: supportive, well-organized, and fair in terms of conditions and benefits. We’ll share more about our benefit package during the interviews.