Senior Security Engineer, FedRAMP

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Own and improve security operations engineering for a FedRAMP environment, focusing on secure CI/CD workflows, infrastructure change control, access management, patch cycles, and security automation. Lead security impact analyses, manage hardened images, and ensure logging/monitoring accuracy by tuning SIEM ingestion and alerts. Triage and respond to security incidents and maintain runbooks/SOPs to support consistent, audit-ready operations while partnering with DevInfra, FedOps, Product, and Compliance.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Maintain and improve CI/CD pipelines to enable secure deployments and infrastructure workflows.
•Manage IaC PRs and Change Control Board reviews to ensure changes are tested, approved, and secure before release.
•Run OS and infrastructure patch cycles for FedRAMP environments, including hardened image and patch workflow management.
•Govern access management (account provisioning, RBAC module maintenance, and periodic access reviews).
•Triage and respond to security incidents end-to-end (investigation, containment, recovery, and after-action reporting) while maintaining runbooks/SOPs and collaborating with DevInfra, FedOps, Product, and Compliance.

Pay and Benefits

Salary: USD 153,000 - 220,000 annually

Key Requirements

•5–7 years in security engineering or infrastructure operations within federal or regulated cloud environments.
•Familiarity with NIST 800-53 controls and continuous monitoring practices.
•Proven delivery of AWS/SaaS security best practices.
•Hands-on CI/CD, infrastructure automation, and infrastructure-as-code (IaC) security practices.
•Experience with patch management, hardened baselines, secure image pipelines, and identity/access management (IAM) enforcement, including SIEM pipeline management and Tier 1/2 incident response.

Experience:5-7 yearsFederalRegulated cloudFedRAMPSaaS

Skills:Technical documentationCollaborationIncident/project managementOperational discipline

Languages:English

Tech Stack:AWSCI/CDInfrastructure-as-codeIaCAccess managementRBACIAMLoggingMonitoringSIEMSIEM ingestionAlertingPatch managementHardened imagesSecurity automationSecOpsNIST 800-53TerraformContainersDevSecOps

Company Brief

Abnormal AI

Website

Loading job details...

Preparing the role view and application actions.

Abnormal AI

4 months ago

Senior Security Engineer, FedRAMP

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 2 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Maintain and improve CI/CD pipelines to enable secure deployments and infrastructure workflows.
•Manage IaC PRs and Change Control Board reviews to ensure changes are tested, approved, and secure before release.
•Run OS and infrastructure patch cycles for FedRAMP environments, including hardened image and patch workflow management.
•Govern access management (account provisioning, RBAC module maintenance, and periodic access reviews).
•Triage and respond to security incidents end-to-end (investigation, containment, recovery, and after-action reporting) while maintaining runbooks/SOPs and collaborating with DevInfra, FedOps, Product, and Compliance.

Pay and Benefits

Salary: USD 153,000 - 220,000 annually

Key Requirements

•5–7 years in security engineering or infrastructure operations within federal or regulated cloud environments.
•Familiarity with NIST 800-53 controls and continuous monitoring practices.
•Proven delivery of AWS/SaaS security best practices.
•Hands-on CI/CD, infrastructure automation, and infrastructure-as-code (IaC) security practices.
•Experience with patch management, hardened baselines, secure image pipelines, and identity/access management (IAM) enforcement, including SIEM pipeline management and Tier 1/2 incident response.

Experience:5-7 yearsFederalRegulated cloudFedRAMPSaaS

Skills:Technical documentationCollaborationIncident/project managementOperational discipline

Languages:English

Company Brief

Abnormal AI

Website