Join our team as a Security Transformation Specialist, a key role in bolstering enterprise vulnerability and compliance initiatives. This position involves translating security standards into actionable controls, validating their effectiveness across cloud and on-premises environments, and collaborating with stakeholders to drive remediation efforts. You'll act as a technical subject-matter expert for vulnerability and compliance operations, while also contributing to automation, reporting, and continuous improvement.

This role demands hands-on experience with cloud security and CSPM platforms like Wiz or Prisma Cloud. A strong background in Qualys Policy Compliance, including assessment and validation, is essential. You should possess a good understanding of cloud-native security, OS-level security, and security configuration standards, coupled with working knowledge of AWS, Azure, and GCP. Solid networking or server administration knowledge, encompassing the OSI model and network security concepts, is also required. Exceptional communication and collaboration skills are vital for explaining technical findings and coordinating across diverse teams.

Key responsibilities include supporting control development and operational compliance using CSPM and Qualys Policy Compliance. You will interpret security standards, translate them into testable control logic, and develop/validate cloud and OS security controls before deployment. Presenting new or enhanced controls in governance forums, investigating exceptions, and providing remediation guidance are also core duties. This role involves partnering with various technical teams to address vulnerabilities and compliance gaps, acting as a primary point of contact for operational queries, and facilitating discussions on control enhancements.

Further responsibilities include conducting periodic reviews with business stakeholders on risk posture and remediation progress. You'll collaborate with tool vendors to resolve product issues and coverage gaps. Performing user acceptance testing for control enhancements and monitoring assessment coverage are also key. Preparing operational reports, supporting governance and audit-readiness, and identifying opportunities for process improvement and automation are crucial aspects of this role. You will also perform administrative activities within security tools.

We are seeking a Security Transformation Senior Analyst with 4-7 years of relevant experience in cybersecurity, vulnerability management, compliance operations, cloud security, or security-control engineering. Practical experience with Qualys Policy Compliance and at least one CSPM platform (Wiz or Prisma Cloud) is mandatory. You should have proven experience validating security controls across cloud platforms, servers, operating systems, and network technologies. Familiarity with issue tracking, evidence management, reporting, and governance workflows is expected.

Professional competencies include strong analytical problem-solving skills and meticulous attention to detail. Ownership and accountability for assigned tasks are essential. The ability to prioritize work, manage dependencies, and communicate risks promptly is critical. Clear documentation, presentation, and stakeholder management skills are highly valued. A continuous-improvement mindset focused on quality, consistency, and measurable outcomes will contribute to success in this role.