Senior Consultant – FedRAMP 20X Advisory

🕒 Agosto 28

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $150.000 - $193.000 / ano

⏰ Tempo Integral

🟠 Sênior

💼 Consultor

👻 Score fantasma 17%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Fortreum

SiteLinkedInTodas as Vagas

51 - 200 funcionários

Fundada em 2020

💼 Consultoria

🏥 Saúde

🎖️ Defesa

Consulting • Healthcare • Defense

A Fortreum é uma empresa de serviços de cibersegurança e conformidade que auxilia provedores de serviços em nuvem, contratantes do governo e empresas a navegarem em estruturas regulatórias e protegerem cargas de trabalho reguladas. A empresa oferece avaliações, roteiros e serviços de consultoria para FedRAMP, CMMC/NIST SP 800-171, DoD Cloud, FISMA, HIPAA, SOC, PCI, ISO 27001 e estruturas relacionadas, além de oferecer um framework de garantia contínua chamado XRAMP junto com ofertas de higiene cibernética executiva. A Fortreum foca em reduzir a sobrecarga de auditoria, alinhar programas de segurança a estratégias de longo prazo e apoiar organizações que buscam certificações no setor público e em indústrias reguladas.

Descrição

• Lead projects evaluating client firms against regulatory and industry requirements, standards, and security best practices • Deliver gap analyses and detailed program recommendations for regulatory or compliance milestones • Prepare clients for FedRAMP 20x Vulnerability Detection & Response (VDR) • Advise on FIPS 140-2/140-3 encryption • Develop and maintain FedRAMP authorization boundary diagrams • Optimize management-plane tooling, including SIEM and vulnerability management • Develop Security Decision Records (SDRs) and Certification Package Overviews (CPOs) • Design and implement client solutions mapped to FedRAMP 20x Key Security Indicators • Build automated, code-based validation methods using scripts, APIs, and Infrastructure-as-Code • Track FedRAMP 20x releases and Change Requests and translate guidance into client recommendations • Use AI/ML tools to catalog Key Security Indicators and help navigate evolving requirements • Advise cloud service providers on generating machine-readable compliance visibility • Establish positive collaborative relationships with clients and stakeholders • Advise clients on compliance activities and desired outcomes • Lead preparation and review of documentation and artifacts, procedure evaluations, and client interviews • Ensure quality products and services are delivered on time and within allotted hours • Pursue continuous professional development and industry-specific certifications • Escalate client and project issues to management • Mentor team members • Interface with clients throughout the entire engagement

🎯 Requisitos

• Bachelor’s Degree or equivalent job experience • 6+ years of professional services experience • 4+ years of FedRAMP experience or cloud security engineering experience • Working knowledge of FedRAMP 20x Key Security Indicators (KSIs) • Comfort using AI tools to interpret and organize regulatory requirements • Active GitHub or portfolio showing coding/cloud automation work • Proficiency in Microsoft 365 product suite • Ability to be self-directed with little oversight • Ability to quickly assess new and leading-edge technologies and concepts • Ability to develop and maintain strong relationships with team members and clients • Comfortable supporting fast-paced team environments • Strong technical acumen with regards to cloud security • Experience with Infrastructure-as-Code (Terraform) and scripting/automation • Looking to achieve AWS Solutions Architect or Security Specialty, or Azure/GCP equivalent • Familiarity with testing in cloud environments, including previous 3PAO experience • Experience writing scripts or building integrations for continuous compliance monitoring/validation • Interest in deepening cloud engineering skills in AWS, Azure, or GCP • Must be legally authorized to work in the United States without sponsorship • Willingness to travel to client locations as required

🏖️ Benefícios

• Medical insurance • Dental insurance • Vision insurance • 401K plan with a 4% match • Company paid short-term disability • Company paid long-term disability • Company paid AD&D and life insurance • Flex time off • Annual bonuses • Training stipends • Certification reimbursements • Access to over 30,000 free online training courses • Personal cell phone allowance • New hire and annual home office stipend • Spot awards • Eleven paid holidays

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo