Security Compliance Lead

Vulcan Technologies; Austin (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Vulcan Technologies, a company providing legal intelligence to state agencies and expanding into federal work, is seeking a security-focused engineer. You will own the System Security Plan, 3PAO engagements, the POA&M, and continuous monitoring, as well as handling security questionnaires, audits, and the security sections of RFIs and RFPs.

We work in a federal-facing environment with strict security requirements; the role requires hands-on engineering experience, cloud security knowledge, and

Qualifications

• Deep understanding of cloud security and compliance requirements.
• Strong engineering experience to implement security controls.
• Proficiency with agentic coding methodologies.

Responsibilities

• Own the System Security Plan (SSP) development and maintenance.
• Lead 3PAO engagements and POA&M processes.
• Manage security questionnaires, audits, and RFIs/RFP security sections.

Skills

Understanding of cloud security and 'n

Job description

The role

Vulcan sells legal intelligence to state agencies and is moving into federal work. FedRAMP is the federal government's security standard for cloud services; we run an environment that already implements most of the required controls and are working toward full federal agency authorization to operate.

You own: the System Security Plan, 3PAO engagement, the POA&M, and continuous monitoring. You also own Security questionnaires, audits, and the security sections of RFIs and RFPs.

What we're looking for

• Understanding of cloud security and compliance
• Engineering experience and ability
• Competence with agentic coding

Nice to have

• Experience taking a package through a 3PAO audit
• Experience going through an agency authorization
• Experience running continuous monitoring (ConMon)
• Understanding of FedRAMP

How we work

We work 996: 9am to 9pm, six days a week, in the Austin office. There is no remote option and no hybrid schedule.

We are a small company attempting a federal certification on a timeline most companies take three years to reach, while continuing to ship product and onboard state customers.