FedRAMP Compliance Specialist: Security & Automation

Abnormal; United States; Remote; USD 115,000 - 173,000; Full time

Job summary

Abnormal AI is seeking a Federal Security and Compliance Analyst to scale its FedRAMP High/Class D program within a fast-moving cybersecurity company. You will own security requirement implementation, gather evidence, and drive remediation with cross-functional teams.

This role sits at the intersection of security engineering, cloud operations, and federal compliance, contributing to compliance-as-code, automation, and audit-ready artifacts while improving processes and building measurable

Qualifications

• 2+ years of experience in security, compliance, GRC, risk, audit, security operations, or a related discipline.

Responsibilities

• Own assigned federal security and compliance workstreams from requirement interpretation through implementation, evidence collection, remediation, and review readiness.
• Drive recurring continuous monitoring and evidence workflows, coordinating across Security, FedOps, Engineering, IT, People Operations, GRC, and other control performers to ensure evidence is current, complete, traceable, and retained correctly.
• Support vulnerability detection and response, including reconciling findings from tools such as Wiz, Nessus, and Burp; risk-based triage; Jira routing; SLA tracking; remediation follow-through; validation; and audit-ready evidence.
• Partner with technical teams on security and compliance impact, supporting Security Impact Assessments, Significant Change Requests, control implementation decisions, and other change-management activities before changes reach production.
• Help build Abnormal’s compliance-as-code program, including structured control content, JSON/YAML or other machine-readable artifacts, schema validation, evidence indexing, automation, deterministic document generation, and reusable workflows.
• Maintain accurate control, evidence, remediation, risk, and ownership records, proactively identifying gaps, aging items, dependencies, and decisions requiring escalation.
• Contribute to federal authorization and assessment artifacts, including control documentation, Security Decision Records, certification-package content, assessor requests, and continuous monitoring deliverables.
• Support federal customer assurance by providing clear, accurate compliance guidance and artifacts for customer onboarding, POVs, DDQs, RFPs, and other government or regulated customer requests.

Skills

Security

Compliance

GRC

Risk management

Audit

Documentation

Communication

Tools

Wiz

Nessus

Burp

Jira

Okta

GitLab

Splunk

AWS GovCloud

OSCAL

JSON/YAML

Job description

Abnormal AI is seeking a Federal Security and Compliance Analyst to scale its FedRAMP High/Class D program within a fast-moving cybersecurity company. You will own security requirement implementation, gather evidence, and drive remediation with cross-functional teams.

This role sits at the intersection of security engineering, cloud operations, and federal compliance, contributing to compliance-as-code, automation, and audit-ready artifacts while improving processes and building measurable