Smartsheet

5 days ago

Senior Security Engineer I – GRC FedRAMP (Remote Eligible)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 11 hours agoStatus: Live

Job Summary

Lead Smartsheet’s FedRAMP and GovRAMP (StateRAMP) authorization programs, owning certification roadmaps, managing 3PAO assessments, and driving continuous monitoring deliverables. Manage POA&M processes, coordinate significant security-impacting change requests, and partner with authorizing officials and federal agencies. Build assessment packages (SSP, SAP, evidence) and streamline compliance automation while translating complex regulatory requirements into actionable roadmaps for engineering and operations teams.

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own FedRAMP and GovRAMP certification roadmaps and strategy for obtaining and maintaining federal authorizations.
•Manage 3PAO relationships and assessments, including initial assessments and annual re-assessments.
•Lead continuous monitoring execution (ConMon), overseeing vulnerability scans, penetration testing, system security plan updates, and compliance reporting.
•Manage POA&M processes for identifying, prioritizing, tracking, and remediating findings and ensuring timely closure.
•Engage with authorizing officials and federal agencies; prepare assessment packages (SSP, SAP, risk exposure tables) and coordinate security-impacting system change requests.

Pay and Benefits

Salary: USD 145,000 - 210,000 annually

Perks:Health InsuranceDental401kRemote WorkPaid HolidaysParental LeaveLife InsuranceLong-term DisabilityLearning BudgetSick Time

Key Requirements

•5+ years of hands-on FedRAMP and/or GovRAMP experience, including obtaining and maintaining ATOs.
•Experience working with accredited 3PAOs, coordinating initial assessments and annual re-assessments, evidence packages, and findings.
•Knowledge of FedRAMP continuous monitoring requirements (monthly deliverables, annual assessment cycles, POA&M management, vulnerability scans, penetration testing, and compliance reporting).
•Strong NIST 800-53 control knowledge, including control baselines, supplemental overlays (e.g., ITAR, CJIS, HIPAA), impact level determination, and control selection.
•US Person status: must be a U.S. Citizen or U.S. National to meet federal compliance requirements.

Experience:5+ yearsFederal complianceFedRAMPGovRAMPGRC

Skills:DocumentationCommunicationStakeholder coordinationProgram managementCompliance translation

Certifications:CISSPCISMCISACRISCFedRAMP-specific credentials

Languages:English

Tech Stack:FedRAMPGovRAMPNIST 800-53ITARCJISHIPAAAWSGCPAzure

Eligibility

Nationality:US National

Company Brief

Smartsheet

Provides a cloud-based work management platform that enables teams to plan, track, automate, and report on work. Smartsheet combines spreadsheets, collaboration, and workflow automation to help organizations manage projects and processes at scale.

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Bellevue, United States

Founded: 2005

Website LinkedIn

Loading job details...

Preparing the role view and application actions.

Smartsheet

5 days ago

Senior Security Engineer I – GRC FedRAMP (Remote Eligible)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI

Last checked: 11 hours agoStatus: Live

Job Summary

Location: United States

Workplace: Remote

Employment Type: Full time

Job Function: Cybersecurity

Seniority: Mid level

Key Responsibilities

•Own FedRAMP and GovRAMP certification roadmaps and strategy for obtaining and maintaining federal authorizations.
•Manage 3PAO relationships and assessments, including initial assessments and annual re-assessments.
•Lead continuous monitoring execution (ConMon), overseeing vulnerability scans, penetration testing, system security plan updates, and compliance reporting.
•Manage POA&M processes for identifying, prioritizing, tracking, and remediating findings and ensuring timely closure.
•Engage with authorizing officials and federal agencies; prepare assessment packages (SSP, SAP, risk exposure tables) and coordinate security-impacting system change requests.

Pay and Benefits

Salary: USD 145,000 - 210,000 annually

Perks:Health InsuranceDental401kRemote WorkPaid HolidaysParental LeaveLife InsuranceLong-term DisabilityLearning BudgetSick Time

Key Requirements

•5+ years of hands-on FedRAMP and/or GovRAMP experience, including obtaining and maintaining ATOs.
•Experience working with accredited 3PAOs, coordinating initial assessments and annual re-assessments, evidence packages, and findings.
•Knowledge of FedRAMP continuous monitoring requirements (monthly deliverables, annual assessment cycles, POA&M management, vulnerability scans, penetration testing, and compliance reporting).
•Strong NIST 800-53 control knowledge, including control baselines, supplemental overlays (e.g., ITAR, CJIS, HIPAA), impact level determination, and control selection.
•US Person status: must be a U.S. Citizen or U.S. National to meet federal compliance requirements.

Experience:5+ yearsFederal complianceFedRAMPGovRAMPGRC

Skills:DocumentationCommunicationStakeholder coordinationProgram managementCompliance translation

Certifications:CISSPCISMCISACRISCFedRAMP-specific credentials

Languages:English

Tech Stack:FedRAMPGovRAMPNIST 800-53ITARCJISHIPAAAWSGCPAzure

Eligibility

Nationality:US National

Company Brief

Smartsheet

Industry: Enterprise Software

Company Size: Enterprise (1,001+ employees)

Revenue: USD 1B+

Growth: Public Company

Valuation: Public Company (Market Cap in USD)

Funding: IPO / Publicly Listed

Headquarters: Bellevue, United States

Founded: 2005

Website LinkedIn