Abnormal AI

Abnormal AI

Abnormal AI provides advanced email security solutions designed to block malicious email attacks, including credential phishing, business email compromise, and account takeover.

Internet Software & Services
Founded 2018

Description

  • Own and improve technical security workflows that keep Abnormal Gov systems compliant and resilient at scale.
  • Maintain and improve CI/CD pipelines to support secure deployments and infrastructure workflows.
  • Manage infrastructure-as-code (IaC) pull requests and Change Control Board reviews to ensure changes are tested, approved, and secure before release.
  • Perform security impact analyses (SIAs) for system and application changes and provide risk-based recommendations.
  • Run OS and infrastructure patch cycles and manage hardened images and secure image pipelines for FedRAMP environments.
  • Govern access management including account provisioning, RBAC module maintenance, and periodic access reviews.
  • Manage logging and monitoring pipelines and tune SIEM ingestion and alerting for coverage and accuracy.
  • Triage and respond to security incidents from alert investigation through containment, recovery, and after-action reporting.
  • Maintain and refine runbooks, SOPs, and documentation to ensure consistent operations and audit readiness, and collaborate with cross-functional teams to embed secure practices.

Requirements

  • 5+ years in security engineering or infrastructure operations within federal or other regulated cloud environments.
  • Strong familiarity with NIST SP 800-53 controls and continuous monitoring practices.
  • Proven delivery of AWS and SaaS security best practices.
  • Hands-on expertise with CI/CD, infrastructure automation, and IaC security practices.
  • Experience in patch management, hardened baselines, and secure image pipelines.
  • Strong knowledge of identity and access management (IAM) design and enforcement in large-scale environments.
  • Proven ability to manage SIEM pipelines and lead Tier 1 / Tier 2 incident response.
  • Strong technical documentation, collaboration, and incident/project management skills.
  • Experience integrating security automation into CI/CD pipelines and SecOps workflows (preferred).
  • Prior experience supporting federal audits or 3PAO engagements, and familiarity with SaaS security operations and monitoring at scale (preferred).

Benefits

  • Base salary range: $153,000 — $220,000 USD.
  • Eligibility for bonus or incentive compensation.
  • Equity may be offered as part of total compensation.
  • Comprehensive benefits package (medical, retirement, and other standard employee benefits).

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

IT Security & Compliance Lead (Amsterdam, NLD)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking a full-time IT Security & Compliance Lead in Amsterdam to establish consistent security governance, compliance, and risk management across its consolidating global network.

Cybersecurity Penetration Testing Salesforce
5 hours, 18 minutes ago

IT Security & Compliance Lead (São Paulo, BR)

B Lab 51-250 Diversified Consumer Services

B Lab is seeking an IT Security & Compliance Lead in São Paulo to establish consistent security governance, compliance, risk management, and incident-response practices across its consolidating global nonprofit network.

Cybersecurity Penetration Testing Salesforce
5 hours, 18 minutes ago

Information Security Engineer

Edmentum 1K-5K Diversified Consumer Services

Edmentum is seeking a Remote First Information Security Engineer to protect the systems, data, and learning platforms supporting millions of students while strengthening security operations and compliance.

Agile Penetration Testing
6 hours, 3 minutes ago

Middle+/Senior DevSecOps Engineer | TechCore

Boosta 501-1000 information technology & services

Boosta is hiring a Middle+/Senior DevSecOps Engineer for its service team to secure and support infrastructure and digital projects across the holding.

AWS Azure Bash CI/CD Cloudflare DNS Docker GCP GitHub Actions GitLab CI HashiCorp Vault Helm JavaScript Jenkins Kubernetes Python SIEM SOC SonarQube Terraform TLS WAF
1 day, 5 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers