FedRAMP Compliance & Security Analyst

Abnormal AI; United States; On-site; USD 115,000 - 173,000; Full time

Job summary

Abnormal AI is seeking a Federal Security and Compliance Analyst to shape how federal compliance operates within a fast-moving cybersecurity company. You will own security requirement implementation, drive risk remediation, and advance our compliance-as-code capabilities for FedRAMP High/Class D.

You will collaborate across Security, Engineering, IT, and GRC teams to ensure evidence is current, complete, and audit-ready while building scalable, automated workflows that improve accuracy and

Qualifications

• 2+ years of experience in security, compliance, GRC, risk, audit, security operations, or a related discipline.

Responsibilities

• Own assigned federal security and compliance workstreams from interpretation through implementation, evidence collection, remediation, and review readiness.
• Drive recurring continuous monitoring and evidence workflows, coordinating across Security, FedOps, Engineering, IT, and other control performers to ensure evidence is current, complete, traceable, and retained correctly.
• Support vulnerability detection and response, including reconciling findings from tools such as Wiz, Nessus, and Burp; risk-based triage; Jira routing; SLA tracking; remediation follow-through; validation; and audit-ready evidence.
• Partner with technical teams on security and compliance impact, supporting Security Impact Assessments, Significant Change Requests, control implementation decisions, and other change-management activities before changes reach production.
• Help build Abnormal's compliance-as-code program, including structured control content, JSON/YAML or other machine-readable artifacts, schema validation, evidence indexing, automation, deterministic document generation, and reusable workflows.
• Maintain accurate control, evidence, remediation, risk, and ownership records, proactively identifying gaps, aging items, dependencies, and decisions requiring escalation.
• Contribute to federal authorization and assessment artifacts, including control documentation, Security Decision Records, certification-package content, assessor requests, and continuous monitoring deliverables.

Skills

Security and Compliance

GRC

Risk assessment

Documentation

Written communication

Automation

Tools

Wiz

Nessus

Burp

Jira

Job description

Abnormal AI is seeking a Federal Security and Compliance Analyst to shape how federal compliance operates within a fast-moving cybersecurity company. You will own security requirement implementation, drive risk remediation, and advance our compliance-as-code capabilities for FedRAMP High/Class D.

You will collaborate across Security, Engineering, IT, and GRC teams to ensure evidence is current, complete, and audit-ready while building scalable, automated workflows that improve accuracy and