Senior Consultant – FedRAMP 20X Advisory

🔥 13 hours ago

🇺🇸 United States – Remote

💵 $150k - $193k / year

⏰ Full Time

🟠 Senior

💼 Consultant

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Fortreum

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2020

💼 Consulting

🏥 Healthcare

🎖️ Defense

Consulting • Healthcare • Defense

Fortreum is a cybersecurity and compliance services firm that helps cloud service providers, government contractors, and enterprises navigate regulatory frameworks and secure regulated workloads. The company provides assessments, roadmaps, and advisory services for FedRAMP, CMMC/NIST SP 800-171, DoD Cloud, FISMA, HIPAA, SOC, PCI, ISO 27001 and related frameworks, and offers a continuous assurance framework called XRAMP along with executive cyber hygiene offerings. Fortreum focuses on reducing audit overhead, aligning security programs to long-term strategies, and supporting organizations pursuing public sector and regulated-industry certifications.

📋 Description

• Lead projects evaluating client firms against regulatory and industry requirements, standards, and security best practices • Deliver gap analyses and detailed program recommendations for regulatory or compliance milestones • Prepare clients for FedRAMP 20x Vulnerability Detection & Response (VDR) • Advise on FIPS 140-2/140-3 encryption • Develop and maintain FedRAMP authorization boundary diagrams • Optimize management-plane tooling, including SIEM and vulnerability management • Develop Security Decision Records (SDRs) and Certification Package Overviews (CPOs) • Design and implement client solutions mapped to FedRAMP 20x Key Security Indicators • Build automated, code-based validation methods using scripts, APIs, and Infrastructure-as-Code • Track FedRAMP 20x releases and Change Requests and translate guidance into client recommendations • Use AI/ML tools to catalog Key Security Indicators and help navigate evolving requirements • Advise cloud service providers on generating machine-readable compliance visibility • Establish positive collaborative relationships with clients and stakeholders • Advise clients on compliance activities and desired outcomes • Lead preparation and review of documentation and artifacts, procedure evaluations, and client interviews • Ensure quality products and services are delivered on time and within allotted hours • Pursue continuous professional development and industry-specific certifications • Escalate client and project issues to management • Mentor team members • Interface with clients throughout the entire engagement

🎯 Requirements

• Bachelor’s Degree or equivalent job experience • 6+ years of professional services experience • 4+ years of FedRAMP experience or cloud security engineering experience • Working knowledge of FedRAMP 20x Key Security Indicators (KSIs) • Comfort using AI tools to interpret and organize regulatory requirements • Active GitHub or portfolio showing coding/cloud automation work • Proficiency in Microsoft 365 product suite • Ability to be self-directed with little oversight • Ability to quickly assess new and leading-edge technologies and concepts • Ability to develop and maintain strong relationships with team members and clients • Comfortable supporting fast-paced team environments • Strong technical acumen with regards to cloud security • Experience with Infrastructure-as-Code (Terraform) and scripting/automation • Looking to achieve AWS Solutions Architect or Security Specialty, or Azure/GCP equivalent • Familiarity with testing in cloud environments, including previous 3PAO experience • Experience writing scripts or building integrations for continuous compliance monitoring/validation • Interest in deepening cloud engineering skills in AWS, Azure, or GCP • Must be legally authorized to work in the United States without sponsorship • Willingness to travel to client locations as required

🏖️ Benefits

• Medical insurance • Dental insurance • Vision insurance • 401K plan with a 4% match • Company paid short-term disability • Company paid long-term disability • Company paid AD&D and life insurance • Flex time off • Annual bonuses • Training stipends • Certification reimbursements • Access to over 30,000 free online training courses • Personal cell phone allowance • New hire and annual home office stipend • Spot awards • Eleven paid holidays