Federal Security & Compliance Specialist

Openkrill; United States; Remote; USD 115,000 - 173,000; Full time

Benefits offered by this job

Bonus eligibility

Equity

Comprehensive benefits package

Job summary

Abnormal AI is seeking a Security & Compliance Analyst, Public Sector to advance FedRAMP High/Class D security and compliance programs. You will own security requirements, collect evidence, drive remediation, and build automation for compliance-as-code.

You’ll collaborate with Security, Engineering, IT, and GRC teams to ensure evidence is current, traceable, and audit-ready while improving processes and documentation for assessors and stakeholders.

Qualifications

• 2+ years of experience in security, compliance, GRC, risk, audit, or related discipline.
• Familiarity with NIST SP 800-53 concepts and how controls map to tech.
• Experience with evidence collection, control documentation, remediation, or continuous monitoring.
• Ability to translate security docs and findings into clear compliance actions.
• Ability to collaborate with cross-functional teams without complete definitions.

Responsibilities

• Own federal security and compliance workstreams from interpretation through implementation and evidence.
• Drive continuous monitoring and evidence workflows across multiple teams to keep evidence current.
• Support vulnerability detection and response, including triage and audit-ready evidence.
• Partner with technical teams on security impact assessments and change-management decisions.
• Help build compliance-as-code with machine-readable artifacts and automated workflows.
• Maintain accurate control, evidence, risk, and ownership records while escalating gaps.
• Contribute to federal authorization artifacts and assurance for government requests.
• Provide clear compliance guidance to federal customers during onboarding and RFPs.

Skills

Security & Compliance

GRC

Risk management

Audit

Security operations

Tools

Wiz

Nessus

Burp

Jira

Job description

Abnormal AI is seeking a Security & Compliance Analyst, Public Sector to advance FedRAMP High/Class D security and compliance programs. You will own security requirements, collect evidence, drive remediation, and build automation for compliance-as-code.

You’ll collaborate with Security, Engineering, IT, and GRC teams to ensure evidence is current, traceable, and audit-ready while improving processes and documentation for assessors and stakeholders.