FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in security operations, incident response, and vulnerability management, with a strong focus on compliance frameworks such as SOC 2 and GDPR. Proficient in maintaining technical security controls and securing cloud infrastructure on AWS and GCP.
Highest-signal resume keywords
Incident Response CoordinationVulnerability ManagementSOC 2 ComplianceCloud Security on AWS and GCPEncryption and Key Management
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Log AnalysisVulnerability ManagementIncident ResponseSecurity Controls MaintenanceVulnerability ScanningBackup RestorationAccess ReviewsTriage Security AlertsPost-Mortem AnalysisCloud Infrastructure Security
Soft Skills
Excellent Written CommunicationExcellent Verbal Communication
Tools & Technologies
VantaAWSGCP
Certifications & Qualifications
Security+CySA+CISSPAssociate of ISC2
Industry Keywords
GDPRSOC 2ComplianceSecurity AdvisoriesIncident TriageTechnical Security Controls
Tech Stack
Tools & technologiesAWSCloudCyber SecurityGoogle Cloud Platform
About the role
Key responsibilities & impact- Monitor and triage security alerts, and escalate real issues
- Coordinate incident response from triage through post-mortem
- Run tabletop exercises
- Triage security advisories and vulnerabilities
- Track patching against remediation SLAs
- Maintain technical security controls, including encryption, key and certificate management, and secrets rotation
- Review cloud and infrastructure configurations against security policies and follow up on fixes
- Run vulnerability scans, backup restores and access reviews
- Collect SOC 2 evidence, including for failing Vanta tests
- Support vendor security reviews, client security questionnaires and GDPR work
- Report on alerts, vulnerabilities and open compliance items
- Work with Engineering, IT and Legal; report to the Director of Legal
Requirements
What you’ll need- 3 to 5 years in a security operations, cybersecurity or security engineering role
- Working knowledge of SOC 2 and GDPR and audit processes
- Hands-on experience with log analysis, vulnerability management and incident response, including post-mortems
- Working knowledge of encryption and key and certificate management
- Experience securing cloud infrastructure on AWS and GCP
- Excellent written and verbal English communication skills
- Experience with Vanta or a similar compliance platform is nice to have
- Security+, CySA+ or CISSP (or Associate of ISC2) certification is nice to have
Benefits
Comp & perks- Iterative, empowering processes
- Full ownership and agency to drive projects forward
- Flexible work environment in a distributed team
- Competitive pay
- Flexible PTO
- Quality healthcare coverage
- Education opportunities
