Security & Compliance Engineer: FedRAMP & GovCloud

Epsilon ASI; United States; Remote; USD 80,000 - 110,000; Full time

Job summary

Epsilon ASI is seeking a Security & Compliance Engineer to support the development and maintenance of secure, compliant technology environments. This role is ideal for an early-career security professional with hands-on experience in security testing, cloud environments, and compliance frameworks, especially FedRAMP.

The position focuses on implementing security controls, performing penetration testing, and maintaining documentation for audit readiness in a remote work setting.

Qualifications

• 1+ year of professional experience in security engineering, cybersecurity, or compliance engineering.
• Hands-on experience with web penetration testing or application security.
• Experience with AWS GovCloud or comparable GCP/Azure environments.
• Familiarity with security and compliance frameworks (e.g., NIST, SOC 2, FedRAMP, CMMC).

Responsibilities

• Support security and compliance initiatives across cloud-based environments.
• Conduct and support web application penetration testing and vulnerability assessments.
• Help implement and maintain security controls aligned with applicable compliance frameworks.
• Work with cloud environments such as AWS GovCloud, with GCP or Azure considered as equivalents.
• Assist with security documentation, assessments, remediation, and audit readiness.
• Collaborate with engineering to identify and address security risks.
• Translate compliance requirements into technical controls and processes.
• Support continuous improvement of security posture and compliance programs.

Skills

Security engineering

Web penetration testing

Cloud environments

Compliance frameworks knowledge

Tools

AWS GovCloud

GCP

Azure

Job description

Epsilon ASI is seeking a Security & Compliance Engineer to support the development and maintenance of secure, compliant technology environments. This role is ideal for an early-career security professional with hands-on experience in security testing, cloud environments, and compliance frameworks, especially FedRAMP.

The position focuses on implementing security controls, performing penetration testing, and maintaining documentation for audit readiness in a remote work setting.