Centric Software Logo

Centric Software

Contract Cyber Security Specialist

Posted 2 Days Ago
In-Office or Remote
2 Locations
120K-150K Annually
Senior level
In-Office or Remote
2 Locations
120K-150K Annually
Senior level
The Cloud Cyber Security Specialist role involves securing AWS and Azure environments, ensuring compliance, mentoring team members, and developing governance frameworks.
The summary above was generated by AI
Job Title:       Cloud Cyber Security Specialist | Contractor
Location:       Remote – Must be Eastern Time Zone
Compensation: $120,000 - $150,000 USD
About Centric Software:
Centric Software stands at the forefront of innovation, delivering cutting-edge PLM solutions tailored specifically for the retail, fashion, footwear, luxury, and consumer goods industries. Our enterprise software applications are designed to meet the unique challenges of the fast-moving consumer goods market, empowering businesses to manage, optimize, and execute their critical processes with ease.
From concept to production, our software solutions streamline the journey of bringing products to life. We support our customers in effectively managing materials, sourcing, quality, and pricing, ensuring every step leads to a successful final catalog. With Centric Software, businesses can navigate the complexities of product development with confidence and agility.  www.centricsoftware.com
Job Summary
Centric Software is seeking a Cloud Security Manager to join our dedicated CyberSecurity team. This role is both hands-on and governance-focused; you’ll secure our AWS and Azure environments while also ensuring compliance.
If you’re passionate about cloud security, comfortable with both engineering and audits, and want to make an impact in a global SaaS environment, we’d love to meet you.
Responsibilities
  • Partner with security and engineering leadership to design and communicate a scalable, resilient cloud security roadmap that aligns with business objectives.
  • Establish regular team practices to ensure security champions are accountable for their deliverables, with risks and priorities clearly communicated to stakeholders. Project timelines, SLAs, and delivery estimates are transparent and agreed upon in advance.
  • Develop and maintain cloud security programs to ensure compliance with regulatory requirements and privacy laws, while anticipating future industry developments and emerging threats.
  • Serve as the primary point of contact for cloud security initiatives, requirements, and escalations, providing subject matter expertise and proactively communicating security posture to both technical and non-technical stakeholders.
  • Support employee retention and growth by mentoring and coaching the team, fostering a people-first culture with clear expectations and structured support to achieve high performance.
  • Define and track key performance indicators (KPIs), objectives and key results (OKRs), and security metrics to demonstrate the effectiveness of the cloud security program, ensuring integration with Vulnerability Management, GRC, and Security Operations.
What You’ll AchieveIn the first 3 months:
  • Perform a full technical review of AWS and Azure environments, validating IAM configurations, network segmentation, encryption, and logging settings.
  • Deploy and tune cloud-native detection and monitoring tools (AWS GuardDuty, Security Hub, Azure Defender) integrated into Cortex XSIAM.
  • Conduct initial vulnerability scans across workloads (VMs, serverless, and SaaS integrations) and establish a remediation priority list.
  • Review existing ISMS documentation and map cloud-specific controls to ISO 27001, SOC 2, and NIS 2 requirements.

In the first 6 months:
  • Implement automated compliance checks for ISO 27001 Annex A controls using cloud-native policies and CSPM tools.
  • Develop and document a cloud security governance framework including policies, standards, and operational baselines for AWS and Azure.
  • Work with CloudOps and DevOps to integrate secret management (Keeper PAM, Key Vault, Secrets Manager) into CI/CD pipelines and operational processes.
  • Establish reporting cadence for cloud security metrics, risks, and progress updates to leadership.

In the first 12 months:
  • Lead penetration testing and red team exercises targeting AWS and Azure environments, validating incident response playbooks.
  • Demonstrate measurable improvements in cloud governance KPIs (policy adoption, reduced misconfigurations, faster vulnerability remediation, improved audit evidence quality).
  • Deliver the annual cloud security risk assessment and strategy roadmap, providing technical evidence and governance updates mapped to ISO 27001, SOC 2, and NIS 2 requirements.
  • Present a multi-year cloud security strategy aligned with Centric’s ISMS program and business objectives.
Qualification
  • 7–10 years in cybersecurity with at least 5+ years of hands-on cloud security experience (AWS & Azure).
  • Strong technical expertise in:
    • AWS (IAM, GuardDuty, Security Hub, KMS, Config, CloudTrail).
    • Azure (Entra ID, Key Vault, Defender for Cloud, Sentinel).
  • Experience with cloud SIEM/SOAR, vulnerability management, and incident response (e.g., Cortex XSIAM, Tanium, CrowdStrike).
  • Proven ability to develop and implement cloud security governance frameworks, policies, and strategies.
  • Knowledge of compliance and regulatory frameworks: ISO 27001, SOC 2, NIS 2, GDPR.
  • Strong background in risk assessments, audits, and ISMS-aligned control design.
  • Excellent communicator, able to explain technical risks to executives and provide actionable guidance to engineers.
Certifications (Preferred)
  • Cloud Security (Highly Preferred):
    • AWS Certified Security – Specialty
    • Microsoft Certified: Cybersecurity Architect Expert
    • Microsoft Certified: Security Operations Analyst Associate
    • CCSK (Certificate of Cloud Security Knowledge)
    • CCSP (Certified Cloud Security Professional)
  • Governance & Compliance (for ISMS alignment):
    • ISO 27001 Lead Implementer or Lead Auditor
  • Optional Add-ons (Nice to Have):
    • GIAC Cloud Security Engineer (GCLD)
    • GIAC Cloud Incident Response (GCIR)
The US base salary range for this full-time position is $120,000 - $150,000 plus variable.   Our salary ranges are determined by role, level and location.  The range for each job posting reflects the minimum and maximum target for new hire salaries for the position across all US locations.  Within the range, individual pay is determined by work location and additional factors, including job-related skills, experience and relevant education or training.  Please note that the compensation details listed reflect the base salary and certain positions may be offered with additional variable incentives. 
Centric Software provides equal employment opportunities to all qualified applicants without regard to race, sex, sexual orientation, gender identity, national origin, color, age, religion, protected veteran or disability status or genetic information. 

 

Top Skills

AWS
Azure
Cloudtrail
Config
Cortex Xsiam
Crowdstrike
Defender For Cloud
Entra Id
Guardduty
Iam
Key Vault
Kms
Security Hub
Sentinel
Tanium

Similar Jobs

A Minute Ago
Remote or Hybrid
United States
Junior
Junior
Artificial Intelligence • Fintech • Information Technology • Software • Data Privacy
Handle cash application processes including posting payments, reconciling accounts, and training new hires. Ensure timely and accurate processing of cash receipts.
Top Skills: Excel
An Hour Ago
In-Office or Remote
2 Locations
Senior level
Senior level
Artificial Intelligence • Enterprise Web • Machine Learning • Natural Language Processing • Software • Conversational AI • Automation
Kustomer seeks a Senior Application Security Engineer to enhance security practices, perform audits, and collaborate across teams to protect applications and customer data, particularly in AI and automation.
Top Skills: AppsecAWSCi/CdDastGCPSast
An Hour Ago
Remote or Hybrid
Texas, USA
89K-115K Annually
Mid level
89K-115K Annually
Mid level
Artificial Intelligence • Hardware • Information Technology • Security • Software • Cybersecurity • Big Data Analytics
The Solutions Architect collaborates with multiple stakeholders to deliver technical solutions for the Command Center suite, ensuring alignment with customer needs and managing project risks.
Top Skills: Ms Visio

What you need to know about the Los Angeles Tech Scene

Los Angeles is a global leader in entertainment, so it’s no surprise that many of the biggest players in streaming, digital media and game development call the city home. But the city boasts plenty of non-entertainment innovation as well, with tech companies spanning verticals like AI, fintech, e-commerce and biotech. With major universities like Caltech, UCLA, USC and the nearby UC Irvine, the city has a steady supply of top-flight tech and engineering talent — not counting the graduates flocking to Los Angeles from across the world to enjoy its beaches, culture and year-round temperate climate.

Key Facts About Los Angeles Tech

  • Number of Tech Workers: 375,800; 5.5% of overall workforce (2024 CompTIA survey)
  • Major Tech Employers: Snap, Netflix, SpaceX, Disney, Google
  • Key Industries: Artificial intelligence, adtech, media, software, game development
  • Funding Landscape: $11.6 billion in venture capital funding in 2024 (Pitchbook)
  • Notable Investors: Strong Ventures, Fifth Wall, Upfront Ventures, Mucker Capital, Kittyhawk Ventures
  • Research Centers and Universities: California Institute of Technology, UCLA, University of Southern California, UC Irvine, Pepperdine, California Institute for Immunology and Immunotherapy, Center for Quantum Science and Engineering

Sign up now Access later

Create Free Account

Please log in or sign up to report this job.

Create Free Account