Senior Security Engineer - FedRAMP, Cloud & Vuln Mgmt

Verily Health; San Bruno; Presencial; MXN 2.846.000 - 3.189.000; Jornada completa

Descripción de la vacante

Verily Health is seeking an exceptional information security engineer to support our Information Security and Privacy Risk Management function. The role requires expertise in vulnerability management, FedRAMP/NIST compliance, and cloud security, with a strong emphasis on regulatory reporting and risk assessment.

The candidate will work closely with the Governance, Risk and Compliance team to ensure ongoing compliance, security engineering excellence, and timely remediation of threats in a

Formación

• BA/BS degree in Computer Science, Engineering, or Management Information Systems.
• 5 years of experience in Information Security or related domains.
• 3 years experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
• Excellent written and verbal communication skills.

Responsabilidades

• Manage tools and inputs that are part of the Vulnerability Management program.
• Track remediation tasks and engage with system owners and stakeholders to ensure compliance.
• Provide regulator weekly/monthly reports for FedRAMP certifications and remediation efforts (POA&M).
• Apply understanding of federal government compliance (FISMA, FedRAMP) to report on process readiness.
• Keep abreast of new threats and validate risk using vulnerability management, scanning, and offensive security frameworks.

Conocimientos

Information security

Vulnerability management

NIST/FedRAMP

Cloud security

Educación

BA/BS in Computer Science, Engineering, MIS

Herramientas

Kubernetes

GCP

AWS

Descripción del empleo

Verily Health is seeking an exceptional information security engineer to support our Information Security and Privacy Risk Management function. The role requires expertise in vulnerability management, FedRAMP/NIST compliance, and cloud security, with a strong emphasis on regulatory reporting and risk assessment.

The candidate will work closely with the Governance, Risk and Compliance team to ensure ongoing compliance, security engineering excellence, and timely remediation of threats in a