FedRAMP Moderate Security Compliance Lead

referralsuseonly; United States; On-site; USD 192,000 - 304,000; Full time

Benefits offered by this job

Stock program

401k with match

Health coverage

Flexible schedule

Generous vacation

Volunteer time

Parental leave

Job summary

Elastic is seeking a Principal Security Compliance Analyst to lead the FedRAMP Moderate program, ensuring ongoing authorization and continuous monitoring. You will partner with security, engineering, IT, product, and legal teams to implement controls and maintain evidence.

Join a distributed team with flexible locations; this role offers a competitive salary, stock program, 401k matching, and comprehensive benefits, with opportunities to impact our compliance posture across environments.

Qualifications

• 5+ years of FedRAMP Moderate program experience.
• Strong FedRAMP, NIST SP 800-53, and continuous monitoring knowledge.
• Experience with SSPs, POA&M, control evidence, vulnerability management, and security assessments.
• Strong project-management and organizational skills.
• Able to communicate with auditors, government stakeholders, and leadership.

Responsibilities

• Manage the FedRAMP Moderate authorization and continuous monitoring program.
• Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and docs.
• Coordinate assessments with 3PAO, federal agencies, consultants, and internal teams.
• Track security findings and POA&M items through remediation.
• Collaborate with Security, Engineering, IT, Product, and Legal to implement controls.
• Monitor deadlines, risks, and compliance metrics; report to leadership.
• Review system and product changes for FedRAMP impact.
• Help control owners understand responsibilities and prep evidence.

Skills

FedRAMP knowledge

NIST SP 800-53

Continuous monitoring

Project management

Stakeholder communication

Tools

SSP

POA&M

Vulnerability management

Security assessments

Job description

Elastic is seeking a Principal Security Compliance Analyst to lead the FedRAMP Moderate program, ensuring ongoing authorization and continuous monitoring. You will partner with security, engineering, IT, product, and legal teams to implement controls and maintain evidence.

Join a distributed team with flexible locations; this role offers a competitive salary, stock program, 401k matching, and comprehensive benefits, with opportunities to impact our compliance posture across environments.