FREE ACCESS
5,000–10,000 jobs/day
See all jobs on Scoutfield
Search thousands of fresh jobs every day.
Discover
- Fresh listings
- Fast filters
- No subscription required
Create a free account and start exploring right away.
Core Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates expertise in vulnerability management, penetration testing, and security operations within a SaaS environment, with a strong focus on compliance standards such as SOC 2 and ISO 27001. Capable of collaborating with technical teams to drive remediation efforts and maintain security documentation and metrics.
Highest-signal resume keywords
Vulnerability ManagementPenetration TestingSOC 2 ComplianceAWS Security PracticesElixir Programming Language
ATS Keywords
Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability ManagementPenetration Testing DesignSecurity TestingRemediation CoordinationTechnical Security OperationsOWASP PrinciplesAWSKubernetesTechnical Evidence InterpretationCompliance Platform Usage
Soft Skills
Strong JudgmentDocumentation SkillsPrioritization SkillsCommunication SkillsIndependent Operation
Tools & Technologies
VantaSecurity Monitoring ToolsLogging ToolsIncident Response ToolsTechnical Risk Reduction Tools
Certifications & Qualifications
SOC 2ISO 27001ISO 42001
Industry Keywords
Cloud InfrastructureAPIsContainersInfrastructure-as-CodeSecurity DocumentationMetricsRemediation RecordsTechnical Response PlaybooksVendor Risk AssessmentsCross-Functional Security Initiatives
Tech Stack
Tools & technologiesAWSCloudElixirKubernetes
About the role
Key responsibilities & impact- Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable
- Coordinate penetration testing and DAST, including scope definition, provider and access management, findings review, remediation tracking, and retesting
- Triage and prioritize findings based on severity, exposure, exploitability, and business impact
- Drive remediation with Engineering and Infrastructure, verify closure, and escalate overdue issues
- Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction
- Upskill Workera teams on vulnerability management, remediation practices, secure configuration, and security testing
- Maintain security documentation, metrics, remediation records, and technical response playbooks
- Maintain Vanta tests and maintenance activities across SOC 2, ISO 27001, and ISO 42001
- Collect and validate technical evidence, support control operation and testing, document exceptions and remediation, and prepare for audits and assessments
- Lead vendor risk assessments and track follow-up actions
- Provide technical expertise for customer security questionnaires and due diligence requests
- Validate technical responses and supporting evidence
- Support cross-functional security initiatives, technical readiness efforts, and transitions involving systems, tooling, and controls
Requirements
What you’ll need- Hands-on experience with vulnerability management, penetration testing design, security testing, remediation coordination, and technical security operations in a SaaS environment
- Working knowledge of SOC 2, ISO 27001, and ISO 42001
- Ability to translate control requirements into technical evidence and actions
- Hands-on experience with OWASP principles and security practices across AWS, Kubernetes, and Elixir Programming Language
- Experience using a compliance or security platform such as Vanta
- Ability to independently interpret Vanta tests, maintenance tasks, and evidence requirements
- Ability to work effectively with Engineering and Infrastructure teams
- Strong judgment, documentation, prioritization, and communication skills
- Comfortable operating independently as a contractor
Benefits
Comp & perks- Contractor role at 40 hours
- Remote work arrangement
- Inclusive and respectful work environment
- Equal employment opportunity
