Senior Cloud Security Engineer – FedRAMP & Automation

Abnormal; Oregon; Hybrid; USD 153,000 - 220,000; Full time

Job summary

Abnormal AI in the United States is seeking a Senior Cloud Security Engineer to build and operate security systems for our FedRAMP authorized environment. You will own secure delivery pipelines, IaC security, patch automation, identity controls, security telemetry, and incident response across a federal platform.

You will design and build capabilities to scale securely, create policy gates for cloud deployments, automate patch and access workflows, and strengthen identity controls, telemetry,

Qualifications

• 8+ years in cloud security/DevSecOps with AWS experience.
• Experience securing cloud deployment pipelines and IaC workflows.
• Proficient in at least one scripting language, preferably Python.

Responsibilities

• Build and improve secure delivery workflows for applications and infrastructure deployed into the federal environment.
• Create policy gates that evaluate infrastructure changes, security requirements, test results, and required approvals before deployment.
• Integrate security scanning and control validation into delivery workflows so issues are identified early in the development process.
• Review infrastructure as code changes that affect the federal boundary and help engineering teams resolve security risks before those changes reach production.
• Design automation that produces change records, approval history, test results, and required evidence directly from engineering workflows.
• Build and maintain hardened system image pipelines that consistently apply approved configurations, security controls, and operating system updates.
• Automate patch deployment across the environment, including testing, scheduling, rollout, validation, exception management, and compliance reporting.
• Improve fleet visibility so teams can quickly identify systems that are missing patches, running unsupported software, or operating outside approved configurations.
• Design and enforce identity and access controls across a complex cloud environment.
• Strengthen cloud security through organization policies, identity controls, resource policies, and automated configuration checks.
• Build preventive guardrails that block insecure or unauthorized configurations before they enter the federal environment.
• Own the reliability of security logging and monitoring pipelines, including ingestion coverage, data quality, source health, retention, and alerting.
• Develop automated checks that identify missing telemetry, delayed events, broken integrations, and other conditions that could reduce security visibility.
• Tune security detections to improve signal quality, reduce unnecessary alerts, and focus responders on activity that requires investigation.
• Build response automation that gathers context, enriches alerts, preserves evidence, and accelerates investigation and containment.
• Lead security incident response for the federal environment, including investigation, containment, recovery, evidence preservation, and after action reporting.
• Partner with infrastructure, operations, product security, incident response, and compliance teams to solve security problems that cross team boundaries.

Skills

Cloud security

DevSecOps

Python scripting

IAM design

Tools

Terraform

Job description

Abnormal AI in the United States is seeking a Senior Cloud Security Engineer to build and operate security systems for our FedRAMP authorized environment. You will own secure delivery pipelines, IaC security, patch automation, identity controls, security telemetry, and incident response across a federal platform.

You will design and build capabilities to scale securely, create policy gates for cloud deployments, automate patch and access workflows, and strengthen identity controls, telemetry,