Fedramp Compliance Engineer Jobs

1 job found

Today

Senior Product Security Engineer

Verily Boston, MA

Boston, MA

Today

$166k - $186k/yr Full time Senior Cloud Platforms Fedramp Compliance

Apply Now

Job Description

Verily is hiring a Senior Product Security Engineer in Boston, MA (onsite) to strengthen Information Security and Privacy Risk Management, with a specific focus on contractual compliance for vulnerability management. This role supports continued FedRAMP authorization by maintaining vulnerability management tooling, driving remediation tracking, validating risk through testing activities, and preparing regulatory reporting.

The salary range for this position is USD 165,500 - 185,500 per year.

What you’ll do

Manage the tools and inputs that support the Vulnerability Management program.
Track remediation tasks and coordinate with systems and services owners and relevant stakeholders to maintain vulnerability management compliance.
Ensure regulator weekly/monthly reporting is delivered to support continual FedRAMP certifications and any necessary remediations such as POA&M.
Use experience with federal compliance practices (including FISMA and FedRAMP) to regularly report on process and operational readiness.
Stay current on emerging threats and vulnerabilities, and validate risk for reported threats using vulnerability management, scanning, and red team operations.

Requirements

BA/BS degree in Computer Science, Engineering, or Management Information Systems.
5 years of experience in Information Security or related domain(s).
3 years of experience with NIST/FedRAMP compliance audits.
Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
Excellent written and verbal communication skills.

Tools and technologies you’ll use

NIST, FedRAMP, FISMA
GCP, AWS
Kubernetes

Preferred qualifications

Experience with FedRAMP Moderate or higher.
Experience with GCP (preferred) or AWS, and containerized environments such as Kubernetes.
Experience with vulnerability management tools including bug bounty programs, scanning, and offensive security frameworks.

View full job page →

Get Fedramp Compliance Engineer Jobs alerts

New Fedramp Compliance Engineer Jobs, daily.