Web Security and Privacy Specialist

Estoras Group of Companies; United States; Remote; USD 96,000 - 165,000; Full time

Job summary

Archive is assembling a team to build a bilingual digital platform for a nonprofit. This remote contract role reviews the project’s applications, identity, AWS and integration controls, identifies security risks, coordinates testing, and verifies remediation with stakeholders.

Candidates should have 5–10 years of experience, be fluent in English, and ideally speak French. Location in Canada or the USA is preferred, with EST business hours being the standard.

Qualifications

• 5–10 years of experience in security assessment and delivery.
• Experience with AWS and integration controls.
• Fluent in English; French a plus.
• Canada or USA location, remote.

Responsibilities

• Review project applications and assess security posture.
• Identify risks and coordinate testing with stakeholders.
• Verify remediation and ensure privacy compliance.
• Document delivery and security decisions.

Skills

Web/API security

Threat modelling

Vulnerability remediation

Identity & access management

Encryption

Secrets management

Audit logging

Privacy compliance

Cloud security (AWS)

Tools

AWS

Job description

This is a remote position. Archive is assembling a team to build a bilingual digital platform for a non profit organization. Each role has one planned assignment, with specialist involvement as needed. Qualified people may cover more than one role. Client's internal team leads product, business project management, UX/design and English/French content. Archive leads technical delivery and handover. All candidates should demonstrate relevant delivery experience, collaborative working and clear documentation. Nonprofit or education experience is an asset.

This contract role will review the project’s application, identity, AWS and integration controls. Identify security and privacy risks, coordinate agreed testing, and verify remediation with the delivery team and Client’s responsible stakeholders.

Requirements

Web/API security assessment, threat modelling and vulnerability remediation. Identity, least-privilege access, encryption, secrets management and audit logging. Canadian privacy requirements, consent, retention, residency and youth-data considerations. Security test scoping, risk reporting and coordination of independent testing where required.

5 to 10 year experience, Canada location, Work remotely, Position to remain open till filled Must be fluent in spoken and written English, huge asset if you are also fluent in spoken and written French.

Prefer contractor located in Canada or the USA.

Client is on the East Coast of Canada so must be available during standard EST business hours.

Originally posted on Himalayas