Teams at Fortreum

Lead and perform SOC 1/2 and ISO/IEC 27001-series security assessments for cloud-based systems: define system boundaries, develop testing plans, complete AICPA/ISO audit documentation, conduct stakeholder and technical interviews, produce final reports and certification deliverables, manage project delivery and utilization, and mentor junior staff. Occasional travel to client sites may be required.

Conduct network, web (API/mobile), and social engineering penetration tests; advise customers on vulnerabilities and remediation; prepare deliverables; coordinate engagements; mentor juniors; meet FedRAMP certification requirements; and support cloud-focused security assessments.