| Location | Atlanta, GA |
| Industry | Staffing/Employment Agencies |
| Company Size | 500 to 999 employees |
| Website | http://www.ampcus.com |
Bravens Inc., a wholly owned subsidiary of Ampcus Inc., is an information technology consulting and services company. Bravens is a leader in providing tailored staffing solutions across both IT and non-IT industries. We are in search of a highly motivated candidate to join our talented team and contribute to our ongoing success.
Job Title: Senior Security Engineer – Risk & Controls
Location(s): Atlanta, GA (Hybrid)
Top 3 skills required for this role:
1. Security Risk & Controls, Risk Assessment, Control Evaluation
2. Remediation, NIST/ISO 27001, Cloud Security, Audit & Compliance.
3. Blockchain Security, IAM, Cryptography, DevSecOps/SSDLC, Vulnerability Management, GRC Tools, CI/CD Security
Required Qualifications:
• Bachelor's degree in Computer Science, Information Security, Information Systems, Engineering, or a related field (or equivalent experience).
• 5+ years of experience in cybersecurity, technology risk, information security, risk management, or controls governance.
• Experience conducting security risk assessments and control evaluations.
• Experience driving remediation activities and managing security issues through closure.
• Strong understanding of security frameworks such as NIST, ISO 27001, CIS Controls, COBIT, or similar standards.
• Understanding of cloud security principles and common cloud service providers (AWS, Azure, or GCP).
• Knowledge of identity and access management, secrets management, encryption, and key management practices.
• Experience supporting audits, regulatory assessments, or compliance reviews.
• Strong analytical, problem-solving, and communication skills.
• Ability to work effectively with both technical and non-technical stakeholders.
Preferred Qualifications:
• Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms (Ethereum, Hyperledger Besu, Canton, Solana, Polygon, etc.).
• Experience with secure software development lifecycle (SSDLC) and DevSecOps practices.
• Experience with vulnerability management and security testing programs.
• Experience with Governance, Risk, and Compliance (GRC) platforms such as Archer, ServiceNow GRC, or MetricStream.
• Experience developing risk metrics, dashboards, and executive reporting.
• Familiarity with CI/CD pipelines and cloud-native security controls.
• Professional certifications such as CISSP, CISM, CRISC, CISA, or CCSP.
• AWS Security Specialty (or equivalent).
Detailed Job Description
Seeking a skilled and motivated Security Engineer – Risk & Controls to join our team. This role is responsible for identifying and assessing technology and security risks, driving remediation efforts, strengthening control frameworks, and partnering with engineering teams to implement secure and compliant solutions. The successful candidate will work closely with engineering, operations, architecture, risk, audit, and control partners to ensure security risks are effectively managed and that security controls are appropriately designed, implemented, and operating effectively. The role combines hands-on security expertise with risk management, governance, and control oversight responsibilities across blockchain, cloud, and enterprise platforms.
Key Responsibilities:
• Conduct security risk assessments and identify control gaps across applications, infrastructure, cloud, and blockchain environments.
• Drive remediation of security findings, vulnerabilities, audit issues, and control deficiencies through closure.
• Design, implement, and assess security controls to ensure effectiveness and regulatory compliance.
• Partner with engineering, architecture, and operations teams to integrate security and controls into system design and delivery processes.
• Perform threat modeling, security reviews, and vulnerability assessments to proactively identify risks.
• Support identity and access management, secrets management, encryption, and key management practices.
• Participate in architecture and solution reviews to ensure alignment with enterprise security standards.
• Support internal audits, regulatory reviews, and compliance assessments, including evidence collection and issue remediation.
• Develop security policies, standards, procedures, and control documentation.
• Monitor risk, remediation, and control effectiveness metrics and provide reporting to management.
• Evaluate security technologies and recommend solutions to strengthen the organization's security posture.
• Provide security and risk guidance to stakeholders and promote a strong security and control culture.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, protected veterans or individuals with disabilities.
Ampcus Inc is a global technology and business consulting firm specializing in Digital Transforrmation, Big Data, Analytics, Cyber Security, Testing, IV&V, Infrastructure Management and Enterprise Solutions. Ampcus Inc is an SBA 8(a) certified Women and Minority Owned global Provider of broad range of consulting Services. From strategy to execution, our disciplined yet flexible approach starts and ends with our clients. By listening hard and working harder, their goals become our goals. We are an ISO 9000, ISO 20000, ISO 27000 and CMMi Level certified company.
Ampcus consultants have significant business, engineering and technology experience. Our consultants have over 20 years of business experience and an average of over 10 years of engineering and technology experience. This means that the project teams understand how systems work and how the technology impacts the business processes of organizations.
We believe that success of an engagement is determined by strong project management, clear communication and mutual commitment working collaboratively. Our methodology begins by listening to the customer needs, then working with their teams to gain a clear understanding of the requirements, while providing a knowledge transfer of best practices for the organization. As a recognized leader providing customized software services, management and engineering solutions to companies around the world, our ability to deliver is a "granted" that makes companies put their trust in us to answer their day-to-day business challenges and put them on a path for greater success. We are the choice for our clients because we look at our clients business from a growth perspective.
Industry: Information Technology and Services
Specialties: Digital Transformation, Big Data and Analytics, Infrastructure Management Services, Testing and IV&V, Cyber Security, Active Directory and E-mail Infrastructure, Project Management, Training, and ERP, CRM. EAI, BI