Senior Information Security Engineer, FedRAMP

🕒 October 19

🇺🇸 United States – Remote

💵 $180k - $190k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Consensus Cloud Solutions

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🏥 Healthcare

☁️ SaaS

🤖 Artificial Intelligence

💰 $225M Post-IPO Debt - Consensus Cloud Solutions on 2025-07

Healthcare • SaaS • Artificial Intelligence

Consensus Cloud Solutions is a public company (NASDAQ: CCSI) that started as a digital cloud faxing organization over 20 years ago and spun off from J2 Global (Ziff Davis) in October 2021. It is described as the global leader of digital cloud fax technology and provides solutions that transform unstructured digital documents into secure, advanced healthcare standard HL7/FHIR structured data. The company leverages Natural Language Processing and AI to create analytics-ready data for clinicians, enabling secure handling of healthcare documents and integration with healthcare data standards. It focuses on the healthcare industry, emphasizing secure cloud fax and document-to-data transformation.

📋 Description

• Provide project management oversight of FedRAMP Security Operations services • Support annual FedRAMP 3PAO assessments and security control validation • Perform operating-system patch management for up to 350 servers • Manage antivirus and endpoint security using FortiClient EMS • Oversee AWS backup and disaster recovery using N2WS Backup • Conduct monthly vulnerability scans using Nessus and Burp Suite, including OS, database, container, web application, and STIG baseline scans • Perform remediation rescans and provide reporting and analysis • Generate monthly security reports and conduct user access reviews • Manage and test Disaster Recovery and Incident Response plans under NIST 800-53 Rev 5 • Operate and maintain SIEM tools such as Splunk for threat detection and correlation • Ensure SOC response SLAs and technical support coverage with a 15-minute callback SLA • Perform continuous log management and intrusion detection monitoring • Conduct configuration consistency checks and quarterly authorized software reviews • Manage AWS GovCloud security groups and access control list reviews • Administer Active Directory accounts, password resets, and YubiKey setup • Manage user access for production, pre-production, and security systems • Support annual penetration testing and red team exercises • Conduct continuous monitoring and FedRAMP validation scans • Collaborate with the GRC team on SIAs, SCRs, and POAMs • Participate in Incident Response and Disaster Recovery testing • Contribute to annual assessment preparation and Significant Change Management reviews • Mentor and guide other security engineers • Evaluate security tools and conduct proof-of-concept testing • Support internal and external security audits including SOC 2, HITRUST, and PCI • Provide input on security policies, procedures, and documentation • Participate in cross-functional infrastructure and application change projects • Deliver security awareness or training sessions • Research emerging threats, vulnerabilities, and security trends • Assist with vendor risk assessments and third-party security reviews • Maintain technical runbooks, knowledge base articles, and process documentation • Support response efforts for privacy incidents or data breaches involving PII/PHI • Participate in industry and government security forums • Provide backup support for security team members

🎯 Requirements

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field is preferred; equivalent practical experience will be considered • 5+ years of experience in security engineering or a similar technical security role • 5+ years of hands-on cybersecurity experience, including at least 4 years in a security engineering role • 5+ years of experience with vulnerability management tools such as Nessus Pro, Burp Suite, and SonarCube • 5+ years of experience with endpoint protection tools such as FortiClient EMS, CrowdStrike, Carbon Black, or SentinelOne • 5+ years of experience with cloud service providers and security platforms, including AWS Security Hub • 4+ years of experience with AWS security services such as IAM, CloudTrail, GuardDuty, and Security Hub • 4+ years of experience implementing STIGs and baseline configuration management • 4+ years of experience with AWS backup and disaster recovery tools such as N2WS Backup • 4+ years of experience with one-time password systems such as Okta • 4+ years of experience with SIEM platforms such as Splunk, Elastic, or Exabeam • 4+ years of experience with security monitoring and incident response processes • 2+ years of direct experience supporting FedRAMP, NIST 800-53, or similar government security compliance frameworks • Hands-on experience with Nessus, Splunk, Burp Suite, FortiClient EMS, and AWS GovCloud is required • Experience applying compliance frameworks to product security efforts in cloud-based and SaaS environments • Practical experience performing vulnerability scanning, patch management, and incident response • Familiarity with cloud security, preferably AWS GovCloud or other regulated cloud environments • Basic understanding of GDPR, CCPA, and NIST • Experience with NIST 800-53 Rev 5 and FedRAMP security compliance frameworks • Strong technical proficiency with security tools, AWS GovCloud, and enterprise IT infrastructure • Ability to manage multiple concurrent security projects and meet deadlines • Ability to communicate technical information to technical and non-technical audiences • Reliable, high-speed internet • Able to sit for long periods and handle extended screen time • Active U.S. citizenship or green card holder residing in the U.S. for a minimum of 3 consecutive years • Satisfactory completion of an extensive Federal Government background check for a Public Trust Position • Eligible to work in the U.S.; sponsorship is not available

🏖️ Benefits

• Annual performance bonus • Employee Stock Purchase Plan (ESPP) • Enhanced time off packages • Benefits • Fully remote work within the U.S. • Up to 10% travel • Reliable, high-speed internet requirement for remote work

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume