Federal Cloud Vulnerability Analyst | FedRAMP & ConMon

Motorola Solutions; Richmond (VA); Remote; USD 110,000 - 120,000; Full time

Benefits offered by this job

Incentive bonus plans

Medical, dental, vision benefits

401K with company match

10 paid holidays

Generous PTO

Employee stock purchase plan

Parental & family leave

Job summary

Motorola Solutions is seeking a cybersecurity professional to lead the ConMon program for FedRAMP-classified environments and to guide engineering teams during assessments. You will manage POAM workflows, generate metrics for internal and government audiences, and onboarding new product teams into continuous monitoring.

The role emphasizes automation, strong communication, and rigorous adherence to security standards, with an emphasis on protecting critical first-responder systems.

Qualifications

• Bachelor's degree and 4+ years of cybersecurity experience.
• Experience with FedRAMP, NIST 800-53, GovRAMP or equivalent.
• Ability to communicate security concepts clearly to technical and non-technical stakeholders.

Responsibilities

• Manage the monthly vulnerability management/ConMon program for FedRAMP Class D and CCCS Medium/Protected B environments.
• Process vulnerability data into POAM and drive completion with engineering teams.
• Liaise with engineering to improve the continuous monitoring process.
• Generate and manage ConMon metrics for government audiences.
• Interface with government customers and review ConMon metrics.
• Prepare ConMon artifacts (scans, POAMs, inventories) for annual assessments.
• Onboard new product teams into the ConMon program.
• Improve monitoring processes with automation and AI agents.
• Maintain process documentation.

Skills

FedRAMP knowledge

NIST 800-53 familiarity

Security governance & risk

Strong communication skills

Education

Bachelor's Degree in a relevant field

Tools

Google Gemini or equivalent LLM tools

Wiz

Google Workspace

Job description

Motorola Solutions is seeking a cybersecurity professional to lead the ConMon program for FedRAMP-classified environments and to guide engineering teams during assessments. You will manage POAM workflows, generate metrics for internal and government audiences, and onboarding new product teams into continuous monitoring.

The role emphasizes automation, strong communication, and rigorous adherence to security standards, with an emphasis on protecting critical first-responder systems.