Senior Cloud Compliance Engineer — RMF/IL5-IL6

Menlo Ventures; California (MO); On-site; USD 105,000 - 175,000; Full time

Job summary

True Anomaly seeks an experienced Compliance Engineer to design and implement secure, compliant cloud architectures. You will build STIGs, manage vulnerability remediation, and drive RMF IL5/IL6 and CMMC alignment.

This hands-on role treats GRC as a product, delivering controls, training, and evidence across the enterprise. You will collaborate with DevOps, engineering, and cybersecurity teams to enable secure, auditable environments in AWS/Azure Government, shaping compliance through training,

Qualifications

• 5+ years of experience in cybersecurity engineering, cloud compliance, or DevSecOps roles.
• Hands-on experience with vulnerability scanning, remediation planning, and automated patching workflows.
• Familiarity with DoD RMF (IL5 and IL6), CMMC and related audit frameworks.
• Proficiency with tools such as JIRA, Nessus, Docebo.

Responsibilities

• Implement and maintain secure, audit-ready systems in AWS and Azure Government environments.
• Develop and maintain custom STIGs for cloud infrastructure and customer-deployed apps.
• Embed compliance training across the enterprise with video and hands-on training.
• Automate scoring and tracking of training requirements for readiness audits.
• Maintain vulnerability metrics dashboards and support incident response and hardening efforts.
• Serve as technical POC during audits and translate security requirements into technical controls.

Skills

Cybersecurity

Cloud Compliance

DevSecOps

RMF IL5/IL6

CMMC

Vulnerability Management

Security Audits

Communications

Tools

JIRA

Nessus

Docebo

Job description

True Anomaly seeks an experienced Compliance Engineer to design and implement secure, compliant cloud architectures. You will build STIGs, manage vulnerability remediation, and drive RMF IL5/IL6 and CMMC alignment.

This hands-on role treats GRC as a product, delivering controls, training, and evidence across the enterprise. You will collaborate with DevOps, engineering, and cybersecurity teams to enable secure, auditable environments in AWS/Azure Government, shaping compliance through training,