Senior Information Security Engineer, FedRAMP
Consensus Cloud Solutions
Posted: 10/19/2026AWSCloudCyber SecuritySplunk
Senior IT Security Engineer
NPR
Posted: 10/19/2026AWSCloudCyber SecurityGoogle Cloud PlatformPythonSplunk
Director – Cybersecurity GRC
DLS Discovery, LLC
Posted: 10/19/2026CloudCyber SecurityServiceNow
Senior Internal Security Investigator
GEICO
Posted: 10/19/2026
Security Engineer II
DreamHost
Posted: 10/19/2026AnsibleAWSAzureDockerFirewallsGoogle Cloud PlatformKubernetesLinuxOpen Source+4 more
Senior Product Security Architect
Datavant
Posted: 10/19/2026AWSAzureCloud
Student Security Coordinator
The College of Education at The University of Texas at Austin
Posted: 10/19/2026
Security Engineer 4 – Remote Access
Capital One
Posted: 10/19/2026AWSCloudCyber SecurityJavaJavaScriptPythonTerraform
Principal Security Architect
S&P Global
Posted: 10/19/2026AWSAzureCloudGoogle Cloud PlatformKubernetesSDLC
Security Manager
DSV - Global Transport and Logistics
Posted: 10/19/2026
Online Visiting Professor – Cybersecurity
DeVry University
Posted: 10/18/2026Cyber Security
Strategic Solution Sales Executive – Cybersecurity
OpenText
Posted: 10/17/2026CloudCyber Security
Security, LP Agent
Sun Hill Industries
Posted: 10/17/2026
Security Cooperation Financial Management Specialist – Lead
Koniag Government Services
Posted: 10/17/2026
Azure Cloud Security Architect
High Bridge Consulting LLC
Posted: 10/17/2026AzureCloudDNSServiceNowUnity
Endpoint and System Security Specialist
High Bridge Consulting LLC
Posted: 10/17/2026
Security Engineer, IT
Sofar Ocean
Posted: 10/17/2026AWSPython
Cybersecurity Engineer II – Information Security
McLeod Health
Posted: 10/17/2026Cyber SecurityFirewalls
Manager, Application Security – SOX IT, Oracle Fusion
Paramount
Posted: 10/16/2026CloudCyber SecurityERPOracle
Security Architecture Lead
Northrop Grumman
Posted: 10/16/2026Cyber Security
Senior Information Security Engineer, FedRAMP
Consensus Cloud SolutionsCore Competencies
Role fitCore Competencies
Use this summary to align your resume positioning with the role.
Demonstrates extensive experience in security engineering, vulnerability management, and compliance with frameworks such as FedRAMP and NIST 800-53. Proficient in managing security operations, incident response, and utilizing security tools like Nessus and Splunk within cloud environments, particularly AWS GovCloud.
Highest-signal resume keywords
FedRAMP ComplianceVulnerability ManagementAWS Security ServicesSecurity Incident ResponseSIEM Tools
Tech Stack
Tools & technologiesAbout the role
Key responsibilities & impact- Provide project management oversight of FedRAMP Security Operations services
- Support annual FedRAMP 3PAO assessments and security control validation
- Perform operating-system patch management for up to 350 servers
- Manage antivirus and endpoint security using FortiClient EMS
- Oversee AWS backup and disaster recovery using N2WS Backup
- Conduct monthly vulnerability scans using Nessus and Burp Suite, including OS, database, container, web application, and STIG baseline scans
- Perform remediation rescans and provide reporting and analysis
- Generate monthly security reports and conduct user access reviews
- Manage and test Disaster Recovery and Incident Response plans under NIST 800-53 Rev 5
- Operate and maintain SIEM tools such as Splunk for threat detection and correlation
- Ensure SOC response SLAs and technical support coverage with a 15-minute callback SLA
- Perform continuous log management and intrusion detection monitoring
- Conduct configuration consistency checks and quarterly authorized software reviews
- Manage AWS GovCloud security groups and access control list reviews
- Administer Active Directory accounts, password resets, and YubiKey setup
- Manage user access for production, pre-production, and security systems
- Support annual penetration testing and red team exercises
- Conduct continuous monitoring and FedRAMP validation scans
- Collaborate with the GRC team on SIAs, SCRs, and POAMs
- Participate in Incident Response and Disaster Recovery testing
- Contribute to annual assessment preparation and Significant Change Management reviews
- Mentor and guide other security engineers
- Evaluate security tools and conduct proof-of-concept testing
- Support internal and external security audits including SOC 2, HITRUST, and PCI
- Provide input on security policies, procedures, and documentation
- Participate in cross-functional infrastructure and application change projects
- Deliver security awareness or training sessions
- Research emerging threats, vulnerabilities, and security trends
- Assist with vendor risk assessments and third-party security reviews
- Maintain technical runbooks, knowledge base articles, and process documentation
- Support response efforts for privacy incidents or data breaches involving PII/PHI
- Participate in industry and government security forums
- Provide backup support for security team members
Requirements
What you’ll need- Bachelor’s degree in cybersecurity, information technology, computer science, or a related field is preferred; equivalent practical experience will be considered
- 5+ years of experience in security engineering or a similar technical security role
- 5+ years of hands-on cybersecurity experience, including at least 4 years in a security engineering role
- 5+ years of experience with vulnerability management tools such as Nessus Pro, Burp Suite, and SonarCube
- 5+ years of experience with endpoint protection tools such as FortiClient EMS, CrowdStrike, Carbon Black, or SentinelOne
- 5+ years of experience with cloud service providers and security platforms, including AWS Security Hub
- 4+ years of experience with AWS security services such as IAM, CloudTrail, GuardDuty, and Security Hub
- 4+ years of experience implementing STIGs and baseline configuration management
- 4+ years of experience with AWS backup and disaster recovery tools such as N2WS Backup
- 4+ years of experience with one-time password systems such as Okta
- 4+ years of experience with SIEM platforms such as Splunk, Elastic, or Exabeam
- 4+ years of experience with security monitoring and incident response processes
- 2+ years of direct experience supporting FedRAMP, NIST 800-53, or similar government security compliance frameworks
- Hands-on experience with Nessus, Splunk, Burp Suite, FortiClient EMS, and AWS GovCloud is required
- Experience applying compliance frameworks to product security efforts in cloud-based and SaaS environments
- Practical experience performing vulnerability scanning, patch management, and incident response
- Familiarity with cloud security, preferably AWS GovCloud or other regulated cloud environments
- Basic understanding of GDPR, CCPA, and NIST
- Experience with NIST 800-53 Rev 5 and FedRAMP security compliance frameworks
- Strong technical proficiency with security tools, AWS GovCloud, and enterprise IT infrastructure
- Ability to manage multiple concurrent security projects and meet deadlines
- Ability to communicate technical information to technical and non-technical audiences
- Reliable, high-speed internet
- Able to sit for long periods and handle extended screen time
- Active U.S. citizenship or green card holder residing in the U.S. for a minimum of 3 consecutive years
- Satisfactory completion of an extensive Federal Government background check for a Public Trust Position
- Eligible to work in the U.S.; sponsorship is not available
Benefits
Comp & perks- Annual performance bonus
- Employee Stock Purchase Plan (ESPP)
- Enhanced time off packages
- Benefits
- Fully remote work within the U.S.
- Up to 10% travel
- Reliable, high-speed internet requirement for remote work
ATS Keywords
✓ Tailor your resumeApplicant Tracking System Keywords
Tip: use these terms in your resume and cover letter to boost ATS matches.
Hard Skills
Vulnerability ScanningPatch ManagementIncident ResponseConfiguration ManagementSecurity Control ValidationDisaster RecoverySecurity ReportingUser Access ManagementCloud SecuritySecurity Policy Development
Soft Skills
Communication SkillsProject ManagementMentoringCollaborationProblem-Solving
Tools & Technologies
NessusBurp SuiteFortiClient EMSSplunkAWS GovCloudN2WS BackupCrowdStrikeCarbon BlackOktaElastic
Industry Keywords
NIST 800-53FedRAMPSOC 2HITRUSTPCIGDPRCCPASecurity AuditsSecurity Awareness TrainingThird-Party Security Reviews