Information Security Engineer
Information Security Engineer
Location: Remote
Mode: Contract to Hire
Description
Job Title: Operations Security Specialist- Cloud Operations and Delivery
Key Responsibilities:
Security Management:
o Develop and implement security policies, protocols, and procedures for cloud environments.
o Monitor cloud infrastructure and applications for security breaches and respond promptly to incidents.
o Conduct regular security assessments, vulnerability scans, and penetration testing.
Compliance and Risk Management:
o Ensure compliance with industry standards, legal requirements, and organizational policies (e.g., GDPR, HIPAA, PCI-DSS).
o Identify and assess security risks, developing strategies to mitigate them.
o Prepare and maintain documentation related to security practices and compliance efforts.
Collaboration and Communication:
o Work closely with IT, DevOps, and Development teams to ensure security is integrated into all stages of the software development lifecycle.
o Provide security training and awareness programs for employees.
o Liaise with external partners and vendors to assess the security posture of third-party services and products.
Incident Response:
o Develop and maintain an incident response plan to manage security incidents effectively.
o Investigate and document security breaches, providing detailed reports and recommendations for prevention.
o Participate in disaster recovery planning and testing.
Continuous Improvement:
o Stay current with emerging security trends, threats, and technologies.
o Propose improvements to security architecture, tools, and processes.
o Evaluate and implement security solutions that enhance the organization's security posture.
Please send resume at
Nancy Shaha
Information Security Engineer
Location: Remote
Mode: Contract to Hire
Description
Job Title: Operations Security Specialist- Cloud Operations and Delivery
Key Responsibilities:
Security Management:
o Develop and implement security policies, protocols, and procedures for cloud environments.
o Monitor cloud infrastructure and applications for security breaches and respond promptly to incidents.
o Conduct regular security assessments, vulnerability scans, and penetration testing.
Compliance and Risk Management:
o Ensure compliance with industry standards, legal requirements, and organizational policies (e.g., GDPR, HIPAA, PCI-DSS).
o Identify and assess security risks, developing strategies to mitigate them.
o Prepare and maintain documentation related to security practices and compliance efforts.
Collaboration and Communication:
o Work closely with IT, DevOps, and Development teams to ensure security is integrated into all stages of the software development lifecycle.
o Provide security training and awareness programs for employees.
o Liaise with external partners and vendors to assess the security posture of third-party services and products.
Incident Response:
o Develop and maintain an incident response plan to manage security incidents effectively.
o Investigate and document security breaches, providing detailed reports and recommendations for prevention.
o Participate in disaster recovery planning and testing.
Continuous Improvement:
o Stay current with emerging security trends, threats, and technologies.
o Propose improvements to security architecture, tools, and processes.
o Evaluate and implement security solutions that enhance the organization's security posture.
Please send resume at
Nancy Shaha