The role involves conducting risk assessments, implementing cloud-native security controls, and ensuring regulatory compliance. Key Responsibilities: * Evaluate and enhance cloud security ...
Quick apply
The role involves conducting risk assessments, implementing cloud-native security controls, and ensuring regulatory compliance. Key Responsibilities: * Evaluate and enhance cloud security ...
Conduct regular audits and assessments to evaluate compliance status. * Collaborate with internal teams to address non-compliance issues and implement corrective actions. Security Monitoring and ...
Quick apply
Conduct regular audits and assessments to evaluate compliance status. * Collaborate with internal teams to address non-compliance issues and implement corrective actions. Security Monitoring and ...
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
Security-Engineer III
Durham, NC · On-site
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
Security-Engineer III
Durham, NC · On-site
... security assessments, etc). - We are looking for folks who have CISSP or have significant experience with secure design and architecture as well as thread modeling and understanding of CI/CD ...
Minimum 10+ years of IT experience * 8+ years of Security Assessment, IT Risk Compliance, IT audit or similar experience * 5+ years internal control risk management, IT controls and related standards
Minimum 10+ years of IT experience * 8+ years of Security Assessment, IT Risk Compliance, IT audit or similar experience * 5+ years internal control risk management, IT controls and related standards
Senior Associate Security Engineer (Application Security)
Raleigh, NC · On-site
$57 - $76.25/hr
The role will provide hands-on experience working with developers, DevOps engineers, and security professionals to identify, assess, and remediate security vulnerabilities across a variety of ...
Senior Associate Security Engineer (Application Security)
Raleigh, NC · On-site
$57 - $76.25/hr
The role will provide hands-on experience working with developers, DevOps engineers, and security professionals to identify, assess, and remediate security vulnerabilities across a variety of ...
Lead Penetration Tester
Raleigh, NC · On-site
Required...7 years • Lead and perform technical security risk assessments on county IT environments (servers, desktops, networks, firewalls, IAM, MFA, VPNs, patching pro....Required...5 years • ...
Lead Penetration Tester
Raleigh, NC · On-site
Required...7 years • Lead and perform technical security risk assessments on county IT environments (servers, desktops, networks, firewalls, IAM, MFA, VPNs, patching pro....Required...5 years • ...
Experience in information security threat and vulnerability analysis Understanding of networking and core Internet protocols (TCP/IP, HTTP, etc.) Experience using network security assessment tools ...
Experience in information security threat and vulnerability analysis Understanding of networking and core Internet protocols (TCP/IP, HTTP, etc.) Experience using network security assessment tools ...
Participate in incident investigations and support cybersecurity response activities. * Assist with security assessments and continuous monitoring activities. Application & Infrastructure Security
Participate in incident investigations and support cybersecurity response activities. * Assist with security assessments and continuous monitoring activities. Application & Infrastructure Security
Security Analyst
Morrisville, NC · On-site
Participate in incident investigations and support cybersecurity response activities. * Assist with security assessments and continuous monitoring activities. Application & Infrastructure Security
Security Analyst
Morrisville, NC · On-site
Participate in incident investigations and support cybersecurity response activities. * Assist with security assessments and continuous monitoring activities. Application & Infrastructure Security
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Ability to manage responsibility for security assessments of a variety of applications or domains ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Ability to manage responsibility for security assessments of a variety of applications or domains ...
Security Analyst
Morrisville, NC · Hybrid
Participate in incident investigations and support cybersecurity response activities. * Assist with security assessments and continuous monitoring activities. Application & Infrastructure Security
Security Analyst
Morrisville, NC · Hybrid
Participate in incident investigations and support cybersecurity response activities. * Assist with security assessments and continuous monitoring activities. Application & Infrastructure Security
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Conduct assessments of threats and vulnerabilities. * Determine deviations from acceptable ... Proficiency in implementing security controls, conducting risk assessments, and documenting ...
Senior Application Security Architect
Cary, NC · On-site
$120 - $180/hr
Work with development teams providing security assessment and hardening of products spanning the SDLC and development pipelines left/early-shifted wherever possible. Includes performing periodic ...
Senior Application Security Architect
Cary, NC · On-site
$120 - $180/hr
Work with development teams providing security assessment and hardening of products spanning the SDLC and development pipelines left/early-shifted wherever possible. Includes performing periodic ...
We offer an excellent compensation package Perform a detailed security assessment and establish the current baseline. Create an information security improvement plan and implement the plan by closely ...
We offer an excellent compensation package Perform a detailed security assessment and establish the current baseline. Create an information security improvement plan and implement the plan by closely ...
Senior Product Security Engineer
Raleigh, NC · On-site
$168K - $210K/yr
An excellent verbal and written communicator, able to produce assessment reports, presentations, and operating procedures. * A developing or established leader who matures security practices and ...
Senior Product Security Engineer
Raleigh, NC · On-site
$168K - $210K/yr
An excellent verbal and written communicator, able to produce assessment reports, presentations, and operating procedures. * A developing or established leader who matures security practices and ...
Senior Product Security Engineer
$168K - $210K/yr
An excellent verbal and written communicator, able to produce assessment reports, presentations, and operating procedures. * A developing or established leader who matures security practices and ...
Senior Product Security Engineer
$168K - $210K/yr
An excellent verbal and written communicator, able to produce assessment reports, presentations, and operating procedures. * A developing or established leader who matures security practices and ...
Risk Management and Threat Assessments: * Conduct ongoing enterprise-wide cybersecurity risk ... Security Operations & Incident Response: * Own the organization's incident response program ...
Quick apply
Risk Management and Threat Assessments: * Conduct ongoing enterprise-wide cybersecurity risk ... Security Operations & Incident Response: * Own the organization's incident response program ...
Engineer III, Security Engineer
Cary, NC · On-site
Security Assessments: Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts. * Technical Communication: Articulate complex ...
Engineer III, Security Engineer
Cary, NC · On-site
Security Assessments: Perform regular security control assessments to validate configuration effectiveness and close gaps discovered during active hunts. * Technical Communication: Articulate complex ...
Research various government standards and requirements documents, code requirements for building and life safety, and other industry guidelines. 7. Conducts security system assessments as a part of a ...
Research various government standards and requirements documents, code requirements for building and life safety, and other industry guidelines. 7. Conducts security system assessments as a part of a ...
Security Assessor information
See Raleigh, NC salary details
$8.65 - $14.76
2% of jobs
$14.76 - $20.88
2% of jobs
$20.88 - $27
0% of jobs
$27 - $33.12
0% of jobs
$33.12 - $39.24
3% of jobs
$39.24 - $45.35
5% of jobs
$48.95 is the 25th percentile. Wages below this are outliers.
$45.35 - $51.47
21% of jobs
The median wage is $56.46 / hr.
$51.47 - $57.59
20% of jobs
$57.59 - $63.71
18% of jobs
$65.13 is the 75th percentile. Wages above this are outliers.
$63.71 - $69.83
15% of jobs
$69.83 - $75.94
14% of jobs
$8
$57
$75
How much do security assessor jobs pay per hour?
As of Aug 9, 2026, the average hourly pay for security assessor in Raleigh, NC is $57.13, according to ZipRecruiter salary data. Most workers in this role earn between $49.09 and $66.11 per hour, depending on experience, location, and employer.
How do you become a security assessor?
To become a security assessor, candidates typically need a background in cybersecurity, information technology, or related fields, along with relevant certifications such as Certified Information Systems Security Professional (CISSP) or Certified Information Security Manager (CISM). Gaining experience in security audits, risk assessment, and compliance standards is also important, and some roles may require security clearance or specific industry knowledge.
What are the key skills and qualifications needed to thrive as a security assessor?
To thrive as a Security Assessor, you need a thorough understanding of information security principles, risk assessment methodologies, and compliance frameworks, often supported by a degree in cybersecurity or related fields. Familiarity with tools such as vulnerability scanners, compliance management systems, and certifications like CISSP, CISA, or PCI QSA is typically required. Strong analytical thinking, attention to detail, and clear communication are vital soft skills for accurately identifying risks and conveying findings to stakeholders. These skills ensure that organizations remain compliant, secure, and resilient against evolving cyber threats.
What are some common challenges security assessors face when conducting security audits, and how can they overcome them?
Security Assessors often encounter challenges such as incomplete documentation, resistance from stakeholders, and rapidly changing technology environments. To overcome these, assessors should develop strong communication skills to build trust, encourage transparency, and ensure all relevant parties understand the importance of compliance. Staying current with industry standards and maintaining flexibility in their assessment approach also helps them adapt to new threats and technologies, ensuring thorough and effective audits.
What is a security assessor?
Security Assessors are professionals who evaluate the security measures, policies, and practices of an organization to identify vulnerabilities and ensure compliance with security standards and regulations. They conduct assessments such as penetration testing, risk analysis, and audits to help organizations safeguard their information systems against threats. Security Assessors often work with frameworks like PCI DSS, ISO 27001, and NIST to ensure best practices are followed. Their work is crucial for maintaining the confidentiality, integrity, and availability of sensitive data.
What is the difference between Security Assessor vs Security Analyst?
| Aspect | Security Assessor | Security Analyst |
|---|---|---|
| Certifications | ISO 27001 Lead Auditor, CISSP, CISA | CISSP, Security+ |
| Work Environment | Audit, compliance, risk assessment | Monitoring, incident response, threat analysis |
| Employer & Industry | Consulting firms, large organizations, government | IT departments, security firms, corporations |
Security Assessors primarily focus on evaluating security controls, conducting audits, and ensuring compliance with standards like ISO 27001. Security Analysts monitor security systems, analyze threats, and respond to incidents. While both roles require cybersecurity knowledge and certifications, Assessors emphasize compliance and auditing, whereas Analysts focus on threat detection and response.
What are popular job titles related to Security Assessor jobs in Raleigh, NC? For Security Assessor jobs in Raleigh, NC, the most frequently searched job titles are:
What job categories do people searching Security Assessor jobs in Raleigh, NC look for? The top searched job categories for Security Assessor jobs in Raleigh, NC are:
Contractor
Re-posted 18 days ago
Job description
Cloud Security Consultant
Location: Remote – USA
Type: Contract / Full-Time
Experience: 5–15Years
Job Description: Seeking an experienced Cloud Security Consultant to assess and implement robust security measures across AWS, Azure, or GCP environments. The role involves conducting risk assessments, implementing cloud-native security controls, and ensuring regulatory compliance.
Key Responsibilities:
Evaluate and enhance cloud security architecture and configurations
Implement security controls, encryption, IAM, and logging
Perform security assessments, audits, and gap analysis
Support DevSecOps and infrastructure-as-code security
Align cloud operations with compliance frameworks (HIPAA, SOC 2, etc.)
Must Have Skills:
Hands-on experience with AWS/Azure/GCP security services
Familiarity with tools like GuardDuty, Security Hub, Azure Security Center
Knowledge of cloud networking, IAM policies, and encryption
Experience in CIS benchmarks, NIST, or ISO 27001 compliance
About AceStack
Sourced by ZipRecruiter
AceStack is a global IT consulting & Staffing agency. We deal in Health care (Nursing, Allied, Clinical/Non-clinical) Staffing, Engineering Staffing & I.T. Staffing. Founded in 2017 in New Jersey, AceStack has reported consistent growth and profit every year and carries zero debt. AceStack consultants are placed across USA, Canada, Mexico, and Asia. In addition to our headquarters in New Jersey – USA, we also have offices in Canada, Noida, and Ahmedabad. AceStack’s exceptionally high-touch service keeps our clients satisfied and our Consultants/Travelers engaged. We believe in investing in our Consultants/Clients in a variety of ways. We employ AceStack ambassador who helps guide Consultants through the on-boarding process and ensure the transition into their new role with our Client is seamless. We also have dedicated Consultant care representatives located throughout our organization who provide the same level of attention throughout our Consultant’s tenure. Due to this level of attention and care, AceStack enjoys not only one of the highest retention rates in the staffing industry but also one of the highest redeployment rates in the industry.