Principle FedRAMP Continuous Monitoring Engineer

LexisNexis Risk Solutions; Alpharetta (GA); On-site; USD 80,000 - 110,000; Full time

Job summary

Join a forward-thinking company as a FedRAMP Continuous Monitoring Engineer, where you will lead compliance initiatives and ensure the security of cloud systems. This role offers the chance to develop comprehensive monitoring plans, conduct risk assessments, and work with cutting-edge technologies. You'll be part of a dedicated team committed to enhancing operational efficiency and making impactful decisions. If you have a passion for security and compliance in the cloud environment, this is the perfect opportunity to advance your career while contributing to safer communities and more transparent commerce.

Qualifications

• Extensive experience in FedRAMP continuous monitoring and compliance.
• In-depth understanding of NIST guidelines and risk management frameworks.

Responsibilities

• Develop and maintain a continuous monitoring plan based on NIST and FedRAMP requirements.
• Conduct regular risk assessments and monitor security logs for compliance.

Skills

FedRAMP Continuous Monitoring

NIST SP 800-53

Cloud Technologies (AWS, Azure)

Vulnerability Scanners

Incident Response

Python

PowerShell

SQL

Tools

SIEM Systems

Power BI

XML

JSON

Excel

Job description

Finance & Accounting
Principle FedRAMP Continuous Monitoring Engineer

• Location: Alpharetta, Georgia, United States of America
• Contract Type: Regular
• Schedule: 40 hours/week
• Job ID: R94505

FedRAMP Continuous Monitoring Engineer

Are you looking for an opportunity to drive our FedRAMP compliance initiatives?

Are you aiming to become our FedRAMP SME?

About the Business

LexisNexis Risk Solutions provides customers with solutions and decision tools that combine public and industry-specific content with advanced technology and analytics to assist them in evaluating and predicting risk and enhancing operational efficiency. We leverage data and analytics to help our customers make better, timelier decisions, ultimately making communities safer, insurance rates more accurate, commerce more transparent, business decisions easier, and processes more efficient. Learn more at https://risk.lexisnexis.com/.

About our Team

This team is responsible for implementing and managing the continuous monitoring of our FedRAMP program.

About the Role

You will oversee and implement continuous monitoring processes in accordance with NIST guidelines to ensure ongoing compliance of our organization's systems and infrastructure with FedRAMP requirements.

Responsibilities

1. Develop and maintain a comprehensive continuous monitoring plan based on NIST SP 800-137, FedRAMP requirements, and organizational needs.
2. Establish processes to collect, analyze, and report security information from various sources, such as security controls, vulnerability assessments, and incident responses.
3. Conduct regular risk assessments to identify vulnerabilities and threats to cloud systems, defining KPIs and metrics to measure program effectiveness.
4. Monitor and analyze security logs, event data, and alerts to identify anomalies, security incidents, and non-compliance.
5. Evaluate vulnerability scans and penetration tests to assess security posture.
6. Review security assessment artifacts, including system security plans, risk assessments, and control implementation documentation.
7. Support audits by compiling and presenting evidence of compliance with FedRAMP and NIST guidelines.

Requirements

1. Extensive FedRAMP continuous monitoring experience.
2. In-depth understanding of NIST SP 800-53 and FedRAMP requirements.
3. Experience implementing and managing continuous monitoring for cloud systems in the Federal Government.
4. Knowledge of cloud technologies (AWS, Azure), security controls, and security tools such as vulnerability scanners and SIEM systems.
5. Proficiency in evaluating vulnerability assessments, penetration testing, and incident response.
6. Understanding of SA&A processes, system security plans, and risk management frameworks like RMF.
7. Ability to work with programming languages (Python, PowerShell) and BI platforms (Power BI).
8. Proficiency with XML/JSON/Excel and SQL for data analysis and database management.
9. Knowledge of software development methodologies (Agile, Waterfall) and familiarity with cloud services (Azure).

We are an equal opportunity employer, committed to a fair and accessible hiring process. For accommodations, please contact us or complete our support form. Learn more about avoiding scams involving impersonators claiming to represent LexisNexis Risk Solutions.