FedRamp Product Security Engineer

Red Hat; United States; On-site; USD 105,000 - 170,000; Full time

Job summary

An innovative company is seeking a proactive Product Security Engineer to enhance security and compliance in complex environments. This role involves leading technical discussions, supporting automation, and collaborating on open-source projects. With a strong focus on cloud security and compliance standards like FedRAMP, the ideal candidate will possess excellent problem-solving skills and a passion for technology. Join a dynamic team that values flexibility and remote work, while making a significant impact in the open-source community. This position offers a competitive salary and a comprehensive benefits package.

Benefits

Comprehensive medical, dental, and vision coverage

Flexible Spending Account

Health Savings Account

Retirement 401(k) with employer match

Paid time off and holidays

Paid parental leave

Employee stock purchase plan

Tuition reimbursement

Transportation expense account

Employee assistance program

Qualifications

• Experience with FedRAMP or RMF process is essential.
• Knowledge of cloud security practices and hybrid-cloud environments.

Responsibilities

• Responsible for security and compliance of FedRAMP environments.
• Lead technical discussions across multi-functional teams.
• Research and analyze new tools for containerized environments.

Skills

FedRAMP process

Cloud security practices

Kubernetes

OpenShift

Go

Python

XML

Automation tools

Security controls analysis

Communication skills

Education

Relevant certifications (CISSP, CISM, CCSP, CISA)

Tools

AWS

Azure

Vulnerability management tools

Job description

FedRamp Product Security Engineer page is loaded

FedRamp Product Security Engineer

Apply remote type Remote locations Remote US NC Remote US DC Remote US VA Remote US MD time type Full time posted on Posted Yesterday job requisition id R-047607

At Red Hat, we connect an innovative community of customers, partners, and contributors to deliver an open source stack of trusted, high-performing solutions. We offer cloud, Linux, middleware, storage, and virtualization technologies, together with award-winning global customer support, consulting, and implementation services. Red Hat is a rapidly growing company supporting more than 90% of Fortune 500 companies.

The Red Hat Product Security Compliance team is seeking a knowledgeable and proactive Product Security Engineer to achieve our security and compliance objectives.The team is growing and we have a big vision particularly as it relates to increasingly complex compliance standards like FedRAMP and burgeoning digital sovereignty laws worldwide. In this role, you should have an excellent ability to solve problems using your in-depth technical understanding of information systems and computing solutions. Be a team player who works and coordinates well with the team.

Red Hat embraces a remote working culture and promotes work flexibility. This team, and many of the people you would work with, are remote and you would be welcome to work from home as well.

Responsibilities:

• Responsible for the security and compliance of systems related to our Digital Sovereign Commercial and FedRAMP environments.

• Comfortable leading technical discussions across multi-functional engineering teams and third party auditors.

• Support the continuous improvement of the Red Hat environments through automation and maturation of processes.

• Support the downstream integration of open-sourced projects; collaborate to develop and implement Red Hat specific capabilities from the upstream.

• Research and analyze new tools, technologies and services for technical suitability within a containerized environment.

• Serve as an evangelist of security and compliance both inside Red Hat and externally, with partners or within the open-source community.

Requirements:

• Experience supporting systems obtain Authorization through the FedRAMP or RMF process is essential.

• Must be a US Citizen for Fedramp

• Knowledge of cloud security practices and technologies is essential.

• Experience securing and supporting compliance efforts in hybrid-cloud environments.

• Experience working with Kubernetes, OpenShift, or similar technologies.

• Experience with programming, scripting and markup languages, such as Go, Python, and XML, as well as automation tools.

• Proven track record of being effective when working remotely and in a self-directed capacity.

• Ability to analyze security controls, assess risks, and design control measures in alignment with FedRAMP standards.

• Strong communication skills, capable of presenting technical compliance concepts to both technical and non-technical audiences.

• Familiarity with cloud service provider environments (e.g., AWS, Azure) and relevant security tools (e.g.,vulnerability management).

• Relevant certifications, such as CISSP, CISM, CCSP, or CISA, are a plus.

• Experience with open-source software is a plus.

• Interest in AI is also a plus.

• US-citizenship.

The salary range for this position is $105,860.00 - $169,340.00. Actual offer will be based on your qualifications.

Pay Transparency

Red Hat determines compensation based on several factors including but not limited to job location, experience, applicable skills and training, external market value, and internal pay equity. Annual salary is one component of Red Hat’s compensation package. This position may also be eligible for bonus, commission, and/or equity. For positions with Remote-US locations, the actual salary range for the position may differ based on location but will be commensurate with job duties and relevant work experience.

About Red Hat

Red Hat is the world’s leading provider of enterprise open source software solutions, using a community-powered approach to deliver high-performing Linux, cloud, container, and Kubernetes technologies. Spread across 40+ countries, our associates work flexibly across work environments, from in-office, to office-flex, to fully remote, depending on the requirements of their role. Red Hatters are encouraged to bring their best ideas, no matter their title or tenure. We're a leader in open source because of our open and inclusive environment. We hire creative, passionate people ready to contribute their ideas, help solve complex problems, and make an impact.

Benefits
● Comprehensive medical, dental, and vision coverage
● Flexible Spending Account - healthcare and dependent care
● Health Savings Account - high deductible medical plan
● Retirement 401(k) with employer match
● Paid time off and holidays
● Paid parental leave plans for all new parents
● Leave benefits including disability, paid family medical leave, and paid military leave
● Additional benefits including employee stock purchase plan, family planning reimbursement, tuition reimbursement, transportation expense account, employee assistance program, and more!

Note: These benefits are only applicable to full time, permanent associates at Red Hat located in the United States.

Inclusion at Red Hat
Red Hat’s culture is built on the open source principles of transparency, collaboration, and inclusion, where the best ideas can come from anywhere and anyone. When this is realized, it empowers people from different backgrounds, perspectives, and experiences to come together to share ideas, challenge the status quo, and drive innovation. Our aspiration is that everyone experiences this culture with equal opportunity and access, and that all voices are not only heard but also celebrated. We hope you will join our celebration, and we welcome and encourage applicants from all the beautiful dimensions that compose our global village.

Equal Opportunity Policy (EEO)
Red Hat is proud to be an equal opportunity workplace and an affirmative action employer. We review applications for employment without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, citizenship, age, veteran status, genetic information, physical or mental disability, medical condition, marital status, or any other basis prohibited by law.

Red Hat does not seek or accept unsolicited resumes or CVs from recruitment agencies. We are not responsible for, and will not pay, any fees, commissions, or any other payment related to unsolicited resumes or CVs except as required in a written contract between Red Hat and the recruitment agency or party requesting payment of a fee.

Red Hat supports individuals with disabilities and provides reasonable accommodations to job applicants. If you need assistance completing our online job application, email [e-mail] . General inquiries, such as those regarding the status of a job application, will not receive a reply.

About Red Hat

We’re the world’s leading provider of enterprise open source solutions—including Linux, cloud, container, and Kubernetes. We deliver hardened solutions that make it easier for enterprises to work across platforms and environments, from the core datacenter to the network edge.

Open unlocks the world’s potential

At Red Hat, our commitment to open source extends beyond technology into virtually everything we do. We collaborate and share ideas, create inclusive communities, and welcome diverse perspectives from all Red Hatters, no matter their role. It’s what makes us who we are.

Some of the most knowledgeable and passionate people in the technology industry work here. Whether we’re building software, championing our products, or training new associates, we’re collaborating openly to make a difference in the world of open source and beyond.