Workera

Security Operations

• Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable
• Coordinate penetration testing and DAST, including scope definition, provider and access management, findings review, remediation tracking, and retesting
• Triage and prioritize findings based on severity, exposure, exploitability, and business impact
• Drive remediation with Engineering and Infrastructure, verify closure, and escalate overdue issues
• Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction
• Upskill Workera teams on vulnerability management, remediation practices, secure configuration, and security testing
• Maintain security documentation, metrics, remediation records, and technical response playbooks
• Maintain Vanta tests and maintenance activities across SOC 2, ISO 27001, and ISO 42001
• Collect and validate technical evidence, support control operation and testing, document exceptions and remediation, and prepare for audits and assessments
• Lead vendor risk assessments and track follow-up actions
• Provide technical expertise for customer security questionnaires and due diligence requests
• Validate technical responses and supporting evidence
• Support cross-functional security initiatives, technical readiness efforts, and transitions involving systems, tooling, and controls

Explore Information Security Operations Specialist – Contract at Workera. Review requirements and application details.

Open roles

Information Security Operations Specialist – Contract