FedRamp Compliance Analyst

Job not on LinkedIn

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $114.8k - $173.3k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

🚔 Compliance

🚫👨‍🎓 No degree required

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Abnormal Security

WebsiteLinkedInAll Job Openings

501 - 1000 employees

🔒 Cybersecurity

Cybersecurity

Abnormal Security is a provider of cloud-native email security solutions that specializes in preventing a wide array of cyber threats. The company focuses on protecting businesses from attacks such as phishing, malware, ransomware, and social engineering, ensuring total protection for corporate email systems. Their offerings include business email security, phishing detection, and securing against account takeovers, making them a leader in the computer and network security space.

📋 Description

• Own assigned federal security and compliance workstreams from requirement interpretation through implementation, evidence collection, remediation, and review readiness • Drive recurring continuous monitoring and evidence workflows across Security, FedOps, Engineering, IT, People Operations, GRC, and other control performers • Support vulnerability detection and response using findings from Wiz, Nessus, Burp, and related tools; perform triage, Jira routing, SLA tracking, remediation follow-through, validation, and evidence preparation • Partner with technical teams on Security Impact Assessments, Significant Change Requests, control implementation decisions, and change-management activities • Help build the compliance-as-code program using structured control content, JSON/YAML artifacts, schema validation, evidence indexing, automation, document generation, and reusable workflows • Maintain control, evidence, remediation, risk, and ownership records and escalate gaps, aging items, dependencies, and decisions • Contribute to federal authorization and assessment artifacts, including control documentation, Security Decision Records, certification-package content, assessor requests, and continuous monitoring deliverables • Support federal customer assurance for onboarding, POVs, DDQs, RFPs, and government or regulated customer requests

🎯 Requirements

• 2+ years of experience in security, compliance, GRC, risk, audit, security operations, or a related discipline • Working knowledge of NIST SP 800-53 • Understanding of translating security controls into technical implementation, operational processes, and audit evidence • Experience with evidence collection, control documentation, vulnerability remediation, risk tracking, audit support, or continuous monitoring • Ability to read architecture diagrams, security documentation, vulnerability findings, Jira tickets, logs, or engineering materials and turn them into compliance actions • Ability to work with Security, Engineering, Infrastructure/Operations, IT, and other technical teams • Strong written communication and precise documentation skills • Ability to manage multiple workstreams, dependencies, owners, and deadlines and escalate risk early • Demonstrated ability to improve processes through automation, documentation, reusable templates, data, or simpler workflows

🏖️ Benefits

• Bonus or incentive compensation may be available • Equity may be available • Comprehensive benefits package • Pre-employment checks aligned with applicable legislation and security/privacy policies