Senior Information Security Engineer, FedRAMP

🕒 Outubro 19

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $180.000 - $190.000 / ano

⏰ Tempo Integral

🟠 Sênior

👮‍♂️ Cibersegurança / Engenheiro de Segurança

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Consensus Cloud Solutions

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

🏥 Saúde

☁️ SaaS

🤖 Inteligência Artificial

💰 $225.000.000 Post-IPO Debt - Consensus Cloud Solutions em 2025-07

Healthcare • SaaS • Artificial Intelligence

A Consensus Cloud Solutions é uma empresa de capital aberto (NASDAQ: CCSI) que começou como uma organização de fax digital em nuvem há mais de 20 anos e se separou da J2 Global (Ziff Davis) em outubro de 2021. É descrita como líder global em tecnologia de fax digital em nuvem e oferece soluções que transformam documentos digitais não estruturados em dados estruturados no padrão avançado de saúde HL7/FHIR. A empresa utiliza Processamento de Linguagem Natural e IA para criar dados prontos para análise para profissionais de saúde, permitindo o manuseio seguro de documentos de saúde e a integração com padrões de dados de saúde. Ela foca na indústria da saúde, enfatizando o fax seguro em nuvem e a transformação de documentos em dados.

Descrição

• Provide project management oversight of FedRAMP Security Operations services • Support annual FedRAMP 3PAO assessments and security control validation • Perform operating-system patch management for up to 350 servers • Manage antivirus and endpoint security using FortiClient EMS • Oversee AWS backup and disaster recovery using N2WS Backup • Conduct monthly vulnerability scans using Nessus and Burp Suite, including OS, database, container, web application, and STIG baseline scans • Perform remediation rescans and provide reporting and analysis • Generate monthly security reports and conduct user access reviews • Manage and test Disaster Recovery and Incident Response plans under NIST 800-53 Rev 5 • Operate and maintain SIEM tools such as Splunk for threat detection and correlation • Ensure SOC response SLAs and technical support coverage with a 15-minute callback SLA • Perform continuous log management and intrusion detection monitoring • Conduct configuration consistency checks and quarterly authorized software reviews • Manage AWS GovCloud security groups and access control list reviews • Administer Active Directory accounts, password resets, and YubiKey setup • Manage user access for production, pre-production, and security systems • Support annual penetration testing and red team exercises • Conduct continuous monitoring and FedRAMP validation scans • Collaborate with the GRC team on SIAs, SCRs, and POAMs • Participate in Incident Response and Disaster Recovery testing • Contribute to annual assessment preparation and Significant Change Management reviews • Mentor and guide other security engineers • Evaluate security tools and conduct proof-of-concept testing • Support internal and external security audits including SOC 2, HITRUST, and PCI • Provide input on security policies, procedures, and documentation • Participate in cross-functional infrastructure and application change projects • Deliver security awareness or training sessions • Research emerging threats, vulnerabilities, and security trends • Assist with vendor risk assessments and third-party security reviews • Maintain technical runbooks, knowledge base articles, and process documentation • Support response efforts for privacy incidents or data breaches involving PII/PHI • Participate in industry and government security forums • Provide backup support for security team members

🎯 Requisitos

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field is preferred; equivalent practical experience will be considered • 5+ years of experience in security engineering or a similar technical security role • 5+ years of hands-on cybersecurity experience, including at least 4 years in a security engineering role • 5+ years of experience with vulnerability management tools such as Nessus Pro, Burp Suite, and SonarCube • 5+ years of experience with endpoint protection tools such as FortiClient EMS, CrowdStrike, Carbon Black, or SentinelOne • 5+ years of experience with cloud service providers and security platforms, including AWS Security Hub • 4+ years of experience with AWS security services such as IAM, CloudTrail, GuardDuty, and Security Hub • 4+ years of experience implementing STIGs and baseline configuration management • 4+ years of experience with AWS backup and disaster recovery tools such as N2WS Backup • 4+ years of experience with one-time password systems such as Okta • 4+ years of experience with SIEM platforms such as Splunk, Elastic, or Exabeam • 4+ years of experience with security monitoring and incident response processes • 2+ years of direct experience supporting FedRAMP, NIST 800-53, or similar government security compliance frameworks • Hands-on experience with Nessus, Splunk, Burp Suite, FortiClient EMS, and AWS GovCloud is required • Experience applying compliance frameworks to product security efforts in cloud-based and SaaS environments • Practical experience performing vulnerability scanning, patch management, and incident response • Familiarity with cloud security, preferably AWS GovCloud or other regulated cloud environments • Basic understanding of GDPR, CCPA, and NIST • Experience with NIST 800-53 Rev 5 and FedRAMP security compliance frameworks • Strong technical proficiency with security tools, AWS GovCloud, and enterprise IT infrastructure • Ability to manage multiple concurrent security projects and meet deadlines • Ability to communicate technical information to technical and non-technical audiences • Reliable, high-speed internet • Able to sit for long periods and handle extended screen time • Active U.S. citizenship or green card holder residing in the U.S. for a minimum of 3 consecutive years • Satisfactory completion of an extensive Federal Government background check for a Public Trust Position • Eligible to work in the U.S.; sponsorship is not available

🏖️ Benefícios

• Annual performance bonus • Employee Stock Purchase Plan (ESPP) • Enhanced time off packages • Benefits • Fully remote work within the U.S. • Up to 10% travel • Reliable, high-speed internet requirement for remote work

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo