Senior Security Engineer, FedRAMP

Job not on LinkedIn

🕒 July 14

🇺🇸 United States – Remote

💵 $153k - $220k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Abnormal Security

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Abnormal Security is a provider of cloud-native email security solutions that specializes in preventing a wide array of cyber threats. The company focuses on protecting businesses from attacks such as phishing, malware, ransomware, and social engineering, ensuring total protection for corporate email systems. Their offerings include business email security, phishing detection, and securing against account takeovers, making them a leader in the computer and network security space.

📋 Description

• Maintain and improve CI/CD pipelines to support secure deployments and infrastructure workflows. • Manage infrastructure-as-code (IaC) PR and Change Control Board reviews, ensuring changes are tested, approved, and secure before release. • Perform security impact analyses (SIAs) for system/application changes and provide recommendations. • Run OS and infrastructure patch cycles; manage hardened images and patch workflows for FedRAMP environments. • Govern access management, including account provisioning, RBAC module maintenance, and periodic reviews. • Manage logging and monitoring pipelines; tune SIEM ingestion and alerting for coverage and accuracy. • Triage and respond to security incidents, from alert investigation through containment, recovery, and after-action reporting. • Maintain and refine runbooks, SOPs, and documentation to ensure consistent operations and audit readiness. • Collaborate with DevInfra, FedOps, Product, and Compliance teams to embed secure practices into operations and development.

🎯 Requirements

• 5 - 7 years in security engineering or infrastructure operations within federal or regulated cloud environments. • Strong familiarity with NIST 800-53 controls and continuous monitoring practices. • Proven delivery of AWS/SaaS security best practices. • Hands-on expertise with CI/CD, infrastructure automation, and IaC security practices. • Experience in patch management, hardened baselines, and secure image pipelines. • Strong knowledge of identity and access management (IAM) design and enforcement in large-scale environments. • Proven ability to manage SIEM pipelines and lead Tier 1/ Tier 2 incident response. • Strong technical documentation, collaboration, and incident/project management skills.

🏖️ Benefits

• Actual compensation will be determined based on several non-discriminatory factors including skills, experience, qualifications, and geographic location. • In addition to base salary, this role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.