FedRAMP Compliance Engineer

Socket.dev; United States; On-site; USD 115,000 - 173,000; Full time

Job summary

Abnormal AI is seeking a Federal Security and Compliance Analyst to scale its FedRAMP High/Class D program, working at the intersection of security engineering, cloud operations, and governance. You will own evidence and control implementation and drive remediation with product teams.

You will partner with Security, Engineering, IT, and Gov teams to accelerate continuous monitoring, audit-ready evidence, and risk-based decision making.

Qualifications

• 2+ years of security, compliance, risk, or audit experience.
• Working knowledge of NIST SP 800-53 and mapping controls to implementation and evidence.
• Experience with compliance operations like evidence collection and risk tracking.
• Ability to read security architecture diagrams and translate findings into actions.
• Ability to collaborate with Security, Engineering, IT, and other teams.
• Strong written documentation for assessors and non-technical stakeholders.
• Proactive, process-driven with automation mindset.
• Familiarity with FedRAMP/other federal frameworks is a plus.

Responsibilities

• Own assigned federal security and compliance workstreams.
• Drive continuous monitoring and evidence workflows with cross-functional teams.
• Support vulnerability detection and remediation, including tool findings and audit-ready evidence.
• Partner with technical teams on security impact assessments and change management.
• Develop and maintain compliance-as-code content and automated artifacts.
• Maintain control, evidence, remediation, risk, and ownership records.
• Contribute to federal authorization artifacts and assessment deliverables.
• Support federal customer assurance with clear compliance guidance.

Job description

Abnormal AI is seeking a Federal Security and Compliance Analyst to scale its FedRAMP High/Class D program, working at the intersection of security engineering, cloud operations, and governance. You will own evidence and control implementation and drive remediation with product teams.

You will partner with Security, Engineering, IT, and Gov teams to accelerate continuous monitoring, audit-ready evidence, and risk-based decision making.