Senior Security Engineer, FedRAMP

Stelle nicht auf LinkedIn

🕒 vor 18 Tagen

🇺🇸 Vereinigte Staaten – Remote

💵 $153.000 - $220.000 / Jahr

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

🦅 H1B-Visum-Sponsor

Dieses Unternehmen hat in der Vergangenheit H1B-Visa gesponsert.

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Abnormal Security

WebsiteLinkedInAlle Stellen

501 - 1000 Mitarbeiter

🔒 Cybersecurity

Cybersecurity

Abnormal bietet umfassenden Schutz vor der größten Bandbreite an Angriffen, darunter Phishing, Malware, Ransomware, Social Engineering, CEO‑Fraud, Kompromittierung der Supply Chain, Kompromittierung interner Konten, Spam und Graymail.

Beschreibung

• Maintain and improve CI/CD pipelines to support secure deployments and infrastructure workflows. • Manage infrastructure-as-code (IaC) PR and Change Control Board reviews, ensuring changes are tested, approved, and secure before release. • Perform security impact analyses (SIAs) for system/application changes and provide recommendations. • Run OS and infrastructure patch cycles; manage hardened images and patch workflows for FedRAMP environments. • Govern access management, including account provisioning, RBAC module maintenance, and periodic reviews. • Manage logging and monitoring pipelines; tune SIEM ingestion and alerting for coverage and accuracy. • Triage and respond to security incidents, from alert investigation through containment, recovery, and after-action reporting. • Maintain and refine runbooks, SOPs, and documentation to ensure consistent operations and audit readiness. • Collaborate with DevInfra, FedOps, Product, and Compliance teams to embed secure practices into operations and development.

🎯 Anforderungen

• 5 - 7 years in security engineering or infrastructure operations within federal or regulated cloud environments. • Strong familiarity with NIST 800-53 controls and continuous monitoring practices. • Proven delivery of AWS/SaaS security best practices. • Hands-on expertise with CI/CD, infrastructure automation, and IaC security practices. • Experience in patch management, hardened baselines, and secure image pipelines. • Strong knowledge of identity and access management (IAM) design and enforcement in large-scale environments. • Proven ability to manage SIEM pipelines and lead Tier 1/ Tier 2 incident response. • Strong technical documentation, collaboration, and incident/project management skills.

🏖️ Vorteile

• Actual compensation will be determined based on several non-discriminatory factors including skills, experience, qualifications, and geographic location. • In addition to base salary, this role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.