FedRAMP Security

Location: Remote

Experience: 8+ YearsWe are seeking a Senior Cloud Security Assessment Engineer with strong experience in security assessments, cloud security, risk management, and regulatory compliance.

Key Responsibilities: Perform security assessments, control validation, vulnerability reviews, and risk analysis across cloud and enterprise environments. Assess security controls against frameworks such as FedRAMP, NIST 800-53, ISO 27001, BSI IT-Grundschutz, or similar standards. Review AWS, Azure, GCP, or OpenStack environments and provide actionable remediation recommendations. Support audit readiness, assessment documentation, security findings, risk reports, SSP/POA&M or similar compliance artifacts. Work with infrastructure and DevSecOps teams to integrate security controls into CI/CD and cloud deployments. Use automation and scripting to support security assessment and remediation activities.

Required Skills: 8+ years of Information Security / Cybersecurity experience. Strong security assessment, risk management, control validation, and compliance experience. Hands-on experience with Terraform, Ansible, Python, and Bash/Shell. Strong cloud security experience with AWS, Azure, GCP, or OpenStack. Experience with vulnerability scanning, CI/CD, DevSecOps, and Infrastructure-as-Code. Knowledge of Kubernetes/container security is preferred. CISSP, CISA, or similar certification is a plus.