Federal Cloud Vulnerability Management Analyst (US REMOTE)

Motorola Solutions; Chicago (IL); Remote; USD 110,000 - 120,000; Full time

Job summary

Motorola Solutions is seeking a security-focused professional to manage the monthly ConMon program for a multi-cloud FedRAMP environment, ensuring continuous monitoring across platforms and compliance with government requirements.

You will translate vulnerability findings into POAMs, drive remediation with engineering teams, and produce metrics for internal and external agency audiences while onboarding new product teams and maintaining thorough documentation.

Qualifications

• Experience with cybersecurity standards (FedRAMP, NIST 800-53, GovRAMP, TX-RAMP, AZRAMP, ISM)
• Ability to communicate security concepts clearly
• Experience with governance, risk management, and compliance

Responsibilities

• Manage the monthly vulnerability management/ConMon program for a multi-cloud FedRAMP Class D environment
• Translate vulnerability data into a Plan of Actions and Milestones (POAM) and drive completion with engineering teams
• Liaise with engineering and development teams to complete and improve the continuous monitoring process
• Generate and manage ConMon metrics for internal and external government agency audiences
• Interface with incoming government agency customers and review ConMon metrics
• Prepare ConMon artifacts (scans, POAMs, inventories) for annual security assessments
• Onboard new Motorola product teams into continuous monitoring program
• Improve continuous monitoring processes with automation and AI agents
• Maintain process documentation

Skills

Security governance

Risk management

Communication skills

Tools

Google Gemini

Wiz

Google Workspace

Job description

Company Overview

At Motorola Solutions, we believe that everything starts with our people. We're a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that's critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.

Department Overview

The Product & Services Cybersecurity Team is accountable for advising and guiding our development organizations in securing our customer-facing products and services. We are a team of security architects, software security engineers, and security solutions engineers. We are passionate about what we do as it is a job like no other. This is an opportunity for you to use user cybersecurity skills to protect the people that protect us. Our customers are first responders. Fire, police, and paramedics, 911 call takers and 911 dispatchers. And when we or our loved ones place that 911 call, we become the customer of our customers. We want that call to be answered, and we want the communications between the dispatcher and the first responder to be available. But what if that 911 call center, or the communications link to the responders in the field, were under attack? What if you or your loved ones' call to 911 went unanswered, or they were unable to dispatch paramedics to your location, because they had been taken down by ransomware? This is not just theoretical, it is happening. First responders and 911 call centers are under attack around the globe, and this is a chance to fight back.

About the Team

The Motorola Solutions Federal Cloud (MSFC) Team is accountable for guiding Motorola Solutions platform and application teams through the complex web of sovereign cloud requirements and authorization processes which apply to our products across the globe. Our team directly enables access to new markets for MSI by successfully guiding and governing these processes, via the achievement of various authorizations, successful assessments, and certifications for Motorola Solutions products. This team is both internally and externally facing, and leads interactions with internal Motorola Solutions leadership, as well as external consultants, 3rd party assessors, various customers, and government agencies (both US and international).

Job Description

In this role you will:

• Manage the monthly vulnerability management/continuous monitoring (ConMon) program for a large, multi-cloud FedRAMP Class D certified and CCCS Medium/Protected B assessed environment
• Process vulnerability data into a Plan of Actions and Milestones (POAM) and drive completion of POAM with engineering and development teams
• Liaise with engineering and development teams to complete and improve the continuous monitoring process
• Generate and manage ConMon metrics for internal and external government agency audiences
• Interface with incoming government agency customers and collaboratively review ConMon metrics
• Prepare ConMon artifacts (scans, POAMs, inventories, etc) for annual security assessmentsWork with team lead to manage incoming FedRAMP 20x ConMon-related changes
• Onboard new Motorola product teams into continuous monitoring program
• Improve continuous monitoring processes with automation and AI agents
• Maintain process documentation

The ideal candidate must demonstrate:

• Experience related to industry cybersecurity standards in at least one of the following: FedRAMP, NIST 800-53, GovRAMP, TX-RAMP, AZRAMP, ITSG-33 (Canadian Centre for Cyber Security (CCCS)), or Information Security Manual (ISM - Australia)

Experience with the following tools:

• Google Gemini or equivalent LLM tools
• Wiz
• Google Workspace
• Technical knowledge and/or experience in security, networking, systems administration, database administration, architecture or another technical domain
• Strong written and verbal communication skills
• Ability to quickly grasp concepts and terminology in security domains including governance, risk management, architecture, compliance, and operations and be able to express them in a clear and concise manner
• Highest level of integrity in dealing with confidential and sensitive information
• Proactive approach and enthusiasm for problem identification and solving
• Ability to work under pressure with minimal supervision and deliver quality results on time
• Flexible and able to adapt to changing priorities
• Light coding skills for custom scripting preferred

Target Base Salary Range

$110,000 USD -$120,000 USD

Consistent with Motorola Solutions values and applicable law, we provide the following information to promote pay transparency and equity. Pay within this range varies and depends on job-related knowledge, skills, and experience. The actual offer will be based on the individual candidate.

Note: Candidate can reside anywhere in th