Lead FedRAMP Security Engineer (FedRAMP)

Location: Remote, United States

Salary: $93,500–$182,850 USD per year

Company

hirify.global provides an AI-powered cyber resilience platform for data protection, security, intelligence, and recovery across workloads and cloud environments.

What you will do

• Lead the implementation and ongoing operation of FedRAMP security controls across cloud infrastructure, security tooling, logging, vulnerability management, and incident response.
• Own the technical health and coverage of EDR, vulnerability scanning, CSPM, container scanning, SIEM ingestion, alerting, and evidence-producing workflows.
• Design, maintain, and validate centralized log ingestion from cloud platforms, operating systems, applications, containers, and security tools into the SIEM.
• Drive vulnerability triage, remediation tracking, risk reduction reporting, and POA&M inputs with engineering, infrastructure, compliance, and vulnerability management teams.
• Develop technical runbooks, SOPs, control evidence, and operational procedures for FedRAMP security operations.
• Support continuous monitoring deliverables and serve as a senior technical contact for FedRAMP audits, 3PAO assessments, agency reviews, and government stakeholders.

Requirements

• 8+ years of experience in cloud security, security engineering, infrastructure security, security operations, or a related technical security role.
• 4+ years of hands-on experience supporting or operating FedRAMP-authorized or authorization-boundary cloud environments, preferably at Moderate or High impact levels.
• Strong knowledge of FedRAMP, NIST SP 800-53, continuous monitoring, POA&M management, control implementation, and audit evidence expectations.
• Hands-on experience with AWS GovCloud and commercial AWS environments; Kubernetes, containers, EKS, Lambda, and cloud-native security controls are strongly preferred.
• Experience operating or integrating EDR, SIEM, vulnerability scanning, container scanning, CSPM, logging, alerting, and security monitoring technologies, including CrowdStrike EDR, Cloud Security, and NG-SIEM.
• Ability to translate FedRAMP requirements into technical designs, operational procedures, evidence-ready artifacts, and validated controls while coordinating remediation, incident response, and audits.

Nice to have

• CISSP, CCSP, AWS Security Specialty, CISM, CISA, Security+, or a similar certification.
• Experience with Moderate or High impact FedRAMP environments.

Culture & Benefits

• Continuous professional development and product training.
• Career growth and advancement opportunities.
• Inclusive company culture.
• Comprehensive global benefits package.