Technical Consultant – FedRAMP Assessment

🕒 Outubro 21

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $80.000 - $134.000 / ano

⏰ Tempo Integral

🟢 Júnior

🟡 Pleno

💼 Consultor

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Coalfire

SiteLinkedInTodas as Vagas

1001 - 5000 funcionários

Fundada em 2001

💼 Consultoria

🏥 Saúde

📦 Logística

Consulting • Healthcare • Logistics

A Coalfire é uma fornecedora de serviços de cibersegurança que ajuda empresas a melhorarem sua resiliência em segurança e a simplificarem a conformidade regulatória. A empresa oferece serviços especializados, incluindo programas de cibersegurança focados em ameaças, automação de conformidade, gestão de riscos e serviços de consultoria em segurança em diversos setores, como serviços financeiros, saúde, varejo e tecnologia. A Coalfire é conhecida por sua expertise em hackers e defensores, e suas plataformas são projetadas para fortalecer a resiliência cibernética dos clientes, reduzir superfícies de ataque e acelerar o alcance de objetivos de conformidade como FedRAMP e HITRUST.

Descrição

• Collaborate with assessors on federal compliance assessments, including FedRAMP, NIST 800-171, and FISMA • Plan assessments for clients • Review technical artifacts to determine whether they demonstrate control implementation • Review infrastructure-as-code templates, CI/CD configurations, and deployment scripts • Use scripting to parse and analyze configuration exports, logs, inventories, and scan data • Research unfamiliar technologies, products, and configurations using vendor documentation and hardening guides • Analyze network traffic flows and implementation of common infrastructure services • Evaluate artifact completeness, currency, and scope • Identify insufficient artifacts and explain required evidence to clients • Review information system security plans • Lead technical interviews and inquiry walkthroughs with client engineers and administrators • Corroborate inquiry conclusions and maintain interview notes • Execute examination, interview, and testing procedures • Assess vulnerabilities against applicable security frameworks • Draft audit observations and assessment reports • Review audit planning and reporting materials • Progress toward FedRAMP Assessor responsibilities and own control families under senior assessor guidance • Educate clients about compliance activities • Manage priorities and delivery utilization targets • Deliver quality products and services on time • Maintain certifications, credentials, and technical knowledge through professional development • Collaborate with project managers, quality management, and delivery teams • Maintain relationships with clients and stakeholders • Identify and escalate upsell and cross-sell opportunities • Apply quality standards throughout work products and deliverables • Advise customers on scope-related issues • Develop documentation and recommendations to improve customers' security posture

🎯 Requisitos

• Minimum 2-3 years of experience in a technical IT role • Ability to read and interpret technical artifacts, including configuration files, command-line output, logs, and system settings • Strong understanding of networking fundamentals, including TCP/IP, subnetting, routing, VLANs and segmentation, NAT, firewalls and ACLs, ports and protocols • Working knowledge of DNS, DHCP, NTP, directory services/LDAP, authentication and MFA, SSH, TLS and certificates, SMTP, SNMP, syslog, load balancers, proxies, and VPN • Working knowledge of Linux and Windows operating system configuration • Experience with infrastructure as code, such as Terraform, CloudFormation, or Ansible • Experience with CI/CD pipelines, such as GitHub Actions, GitLab CI, Azure DevOps, or Jenkins • Scripting experience with Python, PowerShell, or Bash • Ability to read and interpret firewall rulesets and network/boundary/data flow diagrams • Ability to review vulnerability scan output and understand affected components, severity, and remediation • Familiarity with NIST SP 800-37 Revision 2, 800-53 Revision 5, and 800-53A Revision 5 • Ability to independently research technical topics and develop testing approaches for 800-53 control implementations • Ability to assist with artifact collection and provide clients examples of acceptable artifacts • Strong written and verbal communication skills, including explaining technical matters to non-technical audiences • Strong initiative, time management, and ability to meet deadlines • Strong consulting skills and ability to advise and challenge the status quo • Ability to build high-trust relationships and credibility quickly • High attention to detail • Ability to facilitate meetings with small or large groups • Bachelor's degree in IT or a related field, or equivalent combination of education and work experience • Ability to travel up to 20% • Networking, systems, or cloud security certifications are a bonus • Cloud computing experience, vulnerability scanner experience, and prior FedRAMP, FISMA, NIST 800-171, or other security framework experience are bonus qualifications

🏖️ Benefícios

• Flexible work model allowing employees to choose when and where they work • Paid parental leave • Flexible time off • Certification and training reimbursement • Digital mental health and wellbeing support membership • Comprehensive insurance options • Employee resource groups • In-person and virtual events • Equal opportunity and reasonable accommodation

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo