Senior Cloud Security & Vulnerability Lead (FedRAMP)

Verily; Mountain View (CA); On-site; USD 166,000 - 186,000; Full time

Job summary

Verily Health in Mountain View, CA, seeks an exceptional Information Security Engineer to support our Information Security and Privacy Risk Management function. The role combines deep security expertise with risk management to ensure compliance and remediation for vulnerability management.

You will work with Governance, Risk and Compliance to report on FedRAMP/NIST readiness, track remediation tasks, and keep abreast of threats, applying security engineering know-how to protect our cloud and web

Qualifications

• BA/BS degree in Computer Science, Engineering, MIS.
• 5 years of experience in Information Security or related domains.
• 3 years experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security architecture, web app security, vulnerability management, and security engineering.
• Excellent written and verbal communication skills.

Responsibilities

• Manage tools and inputs that are part of the Vulnerability Management program.
• Track remediation tasks, engage with system owners and stakeholders to ensure vulnerability management compliance.
• Ensure regulator weekly/monthly reports for FedRAMP certifications and/or remediations (e.g., POA&M).
• Apply understanding of federal government compliance (e.g., FISMA, FedRAMP) to report on process and readiness.
• Keep abreast of new threats and validate risk using vulnerability management, scanning and red team operations.

Skills

Information security

Cloud security

Vulnerability management

Security engineering

Written and verbal communication

Education

BA/BS in Computer Science, Engineering, MIS

Tools

GCP

AWS

Kubernetes

Job description

Verily Health in Mountain View, CA, seeks an exceptional Information Security Engineer to support our Information Security and Privacy Risk Management function. The role combines deep security expertise with risk management to ensure compliance and remediation for vulnerability management.

You will work with Governance, Risk and Compliance to report on FedRAMP/NIST readiness, track remediation tasks, and keep abreast of threats, applying security engineering know-how to protect our cloud and web