Role: Security Engineer – Risk & Controls
Location: Atlanta, GA, Houston, TX and Jersey City, NJ - Onsite
Duration: Long Term Contract
Primary Skill: Network Security Controls, Secrets Management, SABSA Framework
Job Description
We are looking for someone with over 12 years of experience as a Security Engineer – Risk & Controls, who will be responsible for identifying and assessing technology and security risks, driving remediation efforts, strengthening control frameworks, and partnering with engineering teams to implement secure and compliant solutions. This role spans hands-on security expertise, risk management, governance, and control oversight across blockchain, cloud, and enterprise platforms.
Key Responsibilities
· Conduct security risk assessments, identify control gaps across applications, infrastructure, cloud, and blockchain environments, and design/assess effective security controls.
· Drive the remediation of security findings, vulnerabilities, audit issues, and control deficiencies through to closure.
· Partner with engineering, architecture, and operations teams to integrate security into system design/delivery, perform threat modeling, and participate in solution reviews.
· Support identity and access management (IAM), secrets management, encryption, and key management practices.
· Support internal audits, regulatory reviews, compliance assessments, evidence collection, and issue remediation.
· Develop security policies, standards, procedures, and control documentation while monitoring risk metrics to report to management.
Required Skills & Qualifications
· Expertise in conducting security risk/control evaluations and driving remediation activities.
· Strong understanding of standard frameworks such as NIST, ISO 27001, CIS Controls, COBIT, or similar standards.
· Core understanding of cloud security principles and major providers (AWS, Azure, or Google Cloud Platform).
· Solid knowledge of Identity and Access Management (IAM), secrets management, encryption, and key management practices.
· Hands-on experience supporting audits, regulatory assessments, or compliance reviews.
· Knowledge of blockchain technologies, smart contracts, cryptography, and distributed ledger platforms (e.g., Ethereum, Hyperledger Besu, Canton, Solana, Polygon).
· Proficiency in modern JavaScript/TypeScript frameworks (e.g., React.js, Angular, or Vue.js).
· Experience with Secure Software Development Lifecycle (SSDLC), DevSecOps practices, and CI/CD pipeline integration.
· Familiarity with Governance, Risk, and Compliance platforms such as Archer, ServiceNow GRC, or MetricStream.
· Experience managing vulnerability management and security testing programs.
· Ability to develop risk metrics, dashboards, and executive-level reporting.
Alchemy: Transforming Your Professional Vision into Reality
Since our inception in 2013, Alchemy has been dedicated to reshaping organizational performance through innovative IT services. With a vision to empower businesses seeking a transformative edge, we’ve positioned ourselves at the forefront of digitization and software modernization.
Our name reflects our mission: to transmute technology into gold-standard solutions for our esteemed clients. We proudly serve a diverse range of sectors, including IT and ITES, BFSI, Telecom and Media, Automotive, Manufacturing, Energy, Oil and Gas, Real Estate, Retail, Healthcare, and more.
With a global footprint spanning the USA, India, Europe, Canada, Singapore, Japan, and parts of Central and West Africa, we harness a unique blend of competencies, frameworks, and cutting-edge technologies. Together, we drive growth and innovation across industries, helping organizations turn their visions into reality.
Alchemy – Connecting Talent with Opportunities (Diversity, Equity and Inclusion)
