Cybersecurity Engineer, FedRAMP

This is a fully remote position, open to applicants in Alabama, +42 more states.

📋 Description

• Lead and conduct thorough security assessments of client information systems.

• Review cybersecurity documentation, gather evidence, and perform compliance interviews.

• Assess adherence to FISMA, NIST RMF, and FedRAMP standards.

• Direct cross-functional teams and facilitate compliance discussions.

• Prepare assessment reports, attestations, and documentation for customer compliance.

• Execute system and network vulnerability scans and analyses using both automated and manual methods.

• Identify, validate, and implement vulnerability remediation measures, fix procedures, and risk mitigation strategies.

• Utilize security engineering knowledge to enhance secure architecture, authentication methods, applied cryptography, and application security.

• Interact directly with client stakeholders and provide expert technical advice.

• Mentor team members and assist in designing secure cloud architectures.

• Clarify cybersecurity issues and compliance with standards and frameworks to clients.

• Conduct FedRAMP 20x assessments.

• Travel for client engagements as necessary.

⛳️ Requirements

• Bachelor’s Degree or 5+ years of equivalent experience.

• Must be able to obtain background clearance as required by the government client.

• Must be a U.S. citizen capable of obtaining necessary security clearance as mandated by government contracts.

• Legal authorization for indefinite employment in the U.S. is required.

• Employer work permit sponsorship is not available.

• In-depth knowledge of Cloud Computing, FedRAMP, FISMA, NIST/DoD RMF, and NIST SP 800-series publications.

• Familiarity with secure architecture design, system and network security, authentication protocols, applied cryptography, and application security.

• Proficient in tools like Nessus/ACAS, SCC, DISA STIGs/STIG Viewer, NMAP, and Acunetix.

• At least one advanced industry certification: CISA, CISM, or an equivalent advanced certification in line with A2LA R311.

• At least one listed industry certification such as CCNA Security, CCNA Cyber Ops, CySA+, GCIH, GSNA, GCIA, CISA, CISSP or Associate, CSSLP, CISSO, CFR, CASP+ CE, Cloud+, GICSP, or SCYBER.

• Proficient English communication skills, both verbal and written.

• Capability to draft original assessment reports, attestations, and technical compliance documentation.

• Ability to work independently or as part of a team in a fast-paced remote environment.

• Willingness to travel up to 25% as needed for client engagements.

• Senior-level candidates must also possess CISSP certification.

• Experience in leading or managing intricate information security projects.

• Understanding of SDLC concerning Information Security and Information Assurance.

• Successful completion of the FedRAMP Baltimore Cyber Range is preferred.

• A Bachelor’s degree in Cybersecurity, Computer Science, Engineering, Information Systems, or a related field is preferred.

🏝️ Benefits

• Incentive Bonus Plans.

• Medical, Dental, and Vision benefits.

• 401K with Company Match.

• 10 Paid Holidays.

• Generous Paid Time Off Packages.

• Employee Stock Purchase Plan.

• Paid Parental & Family Leave.

• Referral Payment Plan.

• Remote work arrangement.

• Professional mentorship opportunities.