Senior Security Engineer: Risk, Cloud & DevSecOps

Talentola; Atlanta (GA); On-site; USD 120,000 - 180,000; Full time

Job summary

Talentola in Atlanta, GA seeks a cybersecurity risk specialist to lead security risk assessments, control evaluations, and remediation initiatives across IT and business units. The role requires deep knowledge of NIST, ISO 27001, CIS Controls, COBIT, and cloud security (AWS/Azure/GCP), plus IAM, secrets management and encryption practices.

You will collaborate with both technical and non-technical stakeholders, support audits and regulatory assessments, and report risks with clear, actionable

Qualifications

• Bachelor's degree or equivalent experience in CS/IS/Engineering.
• 5+ years in cybersecurity, technology risk, information security, risk management or controls governance.
• Experience conducting security risk assessments and control evaluations.
• Experience driving remediation activities to closure of security issues.
• Knowledge of frameworks such as NIST, ISO 27001, CIS Controls, COBIT.
• Understanding of cloud security principles (AWS/Azure/GCP).
• Knowledge of IAM, secrets management, encryption, and key management practices.
• Experience supporting audits, regulatory assessments, or compliance reviews.
• Strong analytical, problem-solving, and communication skills with stakeholders.

Skills

Security risk assessments

Remediation management

Security frameworks

Cloud security (AWS/Azure/GCP)

IAM & encryption

Audits & regulatory compliance

Stakeholder communication

Analytical problem solving

Education

Bachelor's degree in Computer Science or related field

Tools

Archer

ServiceNow GRC

MetricStream

Job description

Talentola in Atlanta, GA seeks a cybersecurity risk specialist to lead security risk assessments, control evaluations, and remediation initiatives across IT and business units. The role requires deep knowledge of NIST, ISO 27001, CIS Controls, COBIT, and cloud security (AWS/Azure/GCP), plus IAM, secrets management and encryption practices.

You will collaborate with both technical and non-technical stakeholders, support audits and regulatory assessments, and report risks with clear, actionable