FedRAMP Security

Job Title: FedRAMP Security Assessment Specialist

Location: Remote

Experience: 8+ Years

We are seeking a Senior Cloud Security Assessment Engineer with strong experience in security assessments, cloud security, risk management, and regulatory compliance.

Key Responsibilities:

• Perform security assessments, control validation, vulnerability reviews, and risk analysis across cloud and enterprise environments.
• Assess security controls against frameworks such as FedRAMP, NIST 800-53, ISO 27001, BSI IT-Grundschutz, or similar standards.
• Review AWS, Azure, GCP, or OpenStack environments and provide actionable remediation recommendations.
• Support audit readiness, assessment documentation, security findings, risk reports, SSP/POA&M or similar compliance artifacts.
• Work with infrastructure and DevSecOps teams to integrate security controls into CI/CD and cloud deployments.
• Use automation and scripting to support security assessment and remediation activities.

Required Skills:

• 8+ years of Information Security / Cybersecurity experience.
• Strong security assessment, risk management, control validation, and compliance experience.
• Hands-on experience with Terraform, Ansible, Python, and Bash/Shell.
• Strong cloud security experience with AWS, Azure, GCP, or OpenStack.
• Experience with vulnerability scanning, CI/CD, DevSecOps, and Infrastructure-as-Code.
• Knowledge of Kubernetes/container security is preferred.
• CISSP, CISA, or similar certification is a plus.