RemoteLeaf Logo
Log in Sign up

Lead FedRAMP Security Engineer

3 days, 16 hours ago
United States
Full-time
Lead
Security Engineer
DevOps and Infrastructure
AWS CrowdStrike Kubernetes SIEM
Apply Now
Commvault - English - United States

Commvault - English - United States

Commvault is a leading provider of data protection and information management solutions, helping companies worldwide activate their data to drive more value and business insight. With a focus on data management, Commvault offers a comprehensive portfol...

IT Services
1K-5K
Founded 1996
View All Jobs 6

Description

  • Lead enterprise-wide implementation and ongoing operation of FedRAMP security controls across cloud infrastructure and security processes.
  • Own the technical health and coverage of security tools including EDR, vulnerability scanning, CSPM, container scanning, SIEM ingestion, alerting, and related workflows.
  • Design, maintain, and validate centralized log ingestion from cloud platforms, systems, applications, containers, and security tools into the SIEM.
  • Drive vulnerability triage, remediation tracking, risk reduction reporting, and POA&M inputs with engineering and compliance teams.
  • Develop and maintain technical runbooks, SOPs, implementation evidence, and operational procedures for FedRAMP security operations.
  • Support FedRAMP continuous monitoring deliverables including scan results, POA&M updates, configuration reports, incident notifications, metrics, and control evidence.
  • Partner with product and infrastructure teams to understand architecture, deployment patterns, authorization boundaries, inherited controls, and shared responsibilities.
  • Serve as a senior technical point of contact for FedRAMP audits, 3PAO assessments, agency reviews, and government stakeholder discussions.

Requirements

  • 8+ years of experience in cloud security, security engineering, infrastructure security, security operations, or related technical security roles.
  • 4+ years of hands-on experience supporting or operating FedRAMP-authorized or authorization-boundary cloud environments, preferably Moderate or High.
  • Strong working knowledge of FedRAMP, NIST SP 800-53, continuous monitoring, POA&M management, control implementation, and audit evidence expectations.
  • Hands-on experience with AWS GovCloud and commercial AWS environments.
  • Experience with Kubernetes, containers, EKS, Lambda, and cloud-native security controls strongly preferred.
  • Experience operating or integrating EDR, SIEM, vulnerability scanning, container scanning, CSPM, logging, alerting, and security monitoring technologies.
  • Experience managing and operating CrowdStrike, including EDR, Cloud Security, and NG-SIEM modules, in commercial or GovCloud instances.
  • Ability to translate FedRAMP requirements into technical designs, control implementations, operational procedures, and evidence-ready artifacts.
  • Experience coordinating incident response, vulnerability remediation, audit preparation, control validation, and cross-functional FedRAMP program activities.
  • Strong communication skills for explaining technical control posture, remediation plans, and audit findings to engineers, executives, auditors, 3PAOs, and government stakeholders.
  • Relevant certifications such as CISSP, CCSP, AWS Security Specialty, CISM, CISA, Security+, or similar are preferred.
  • Ability to balance hands-on security engineering with structured compliance, continuous monitoring, and audit responsibilities.
  • Ability to influence engineering, security, compliance, and external stakeholders without direct authority.
  • Pragmatic, detail-oriented, organized, and able to drive complex issues to resolution in a regulated cloud environment.

Benefits

  • Base salary range of $93,500 to $182,850 USD.
  • Continuous professional development and product training.
  • Clear career growth and advancement opportunities.
  • Inclusive company culture.
  • Comprehensive global benefits package.
  • Remote work option indicated by #LI-Remote.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Hummingbird

Senior Security Engineer

Hummingbird 1K-5K Professional Services

Hummingbird is hiring a Senior Security Engineer to own and strengthen security for its remote-first SaaS platform that helps financial institutions fight financial crime.

Anywhere Senior Security Engineer
AWS Azure CircleCI Docker Encryption GraphQL JavaScript Network Security PostgreSQL Python React Redis Ruby Ruby on Rails Terraform TypeScript
1 day, 15 hours ago
Kalles Group

Principal IAM Engineer Consultant

Kalles Group 11-50 Internet Software & Services

Kalles Group is hiring a remote Principal IAM Engineer Consultant to lead engineering design and delivery for a customer identity and access management platform in a highly regulated financial services environment.

Anywhere Full-time Lead Security Engineer Software Engineer
$160k-$220k
DevSecOps Microservices REST API SAML
2 days, 15 hours ago
PlayStation

Senior Security Research Engineer

PlayStation 100K+ Household Durables

Sony Interactive Entertainment is hiring a Senior Security Research Engineer to lead Global Vulnerability Management efforts that advance its Threat Exposure Management program and strengthen security risk reduction across the PlayStation ecosystem.

United States Full-time Lead Research Scientist Security Engineer
$176k-$263k
Bash CI/CD Domo Git JavaScript PowerShell Python Snowflake SQL
2 days, 16 hours ago
Dragos

Senior Capabilities Developer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Capabilities Developer to build and maintain the Synapse-based threat intelligence infrastructure that powers analysis and reporting for critical infrastructure cybersecurity.

United States Full-time Senior Security Engineer Software Engineer
$152k-$152k
2 days, 16 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers