Senior FedRAMP Security Engineer: CI/CD & IAM Lead

Menlo Ventures; United States; On-site; USD 153,000 - 220,000; Full time

Job summary

Abnormal AI is seeking a Senior Security Engineer to own and improve security operations for FedRAMP environments, focusing on secure CI/CD, access management, patching, incident response, and automation.

You will collaborate with DevInfra, FedOps, Product, and Compliance to embed secure practices into operations and development at scale, while maintaining audit readiness and efficient workflows.

Qualifications

• 5–7 years in security engineering or infrastructure operations in federal/reg cloud environments.
• Strong familiarity with NIST 800-53 controls and continuous monitoring practices.
• Proven delivery of AWS/SaaS security best practices.
• Hands-on expertise with CI/CD, infrastructure automation, and IaC security practices.
• Experience in patch management, hardened baselines, and secure image pipelines.
• Deep knowledge of IAM design and enforcement in large-scale environments.
• Proven ability to manage SIEM pipelines and lead incident response teams.
• Strong documentation, collaboration, and incident/project management skills.

Responsibilities

• Maintain and improve CI/CD pipelines to support secure deployments and infrastructure workflows.
• Manage IaC PR and Change Control Board reviews, ensuring tested, approved, and secure changes before release.
• Perform security impact analyses for system/application changes and provide recommendations.
• Run OS and infrastructure patch cycles; manage hardened images and patch workflows for FedRAMP environments.
• Govern access management, including account provisioning, RBAC maintenance, and periodic reviews.
• Manage logging and monitoring pipelines; tune SIEM ingestion and alerting for coverage and accuracy.
• Triage and respond to security incidents from alert investigation through containment and recovery.
• Maintain and refine runbooks, SOPs, and documentation for audit readiness.
• Collaborate with DevInfra, FedOps, Product, and Compliance to embed secure practices.

Skills

Security engineering

Federal/regulatory cloud environments

NIST 800-53 controls

CI/CD security

IaC security

IAM design

SIEM & incident response

Documentation & project mgmt

Tools

Terraform

Containers

Job description

Abnormal AI is seeking a Senior Security Engineer to own and improve security operations for FedRAMP environments, focusing on secure CI/CD, access management, patching, incident response, and automation.

You will collaborate with DevInfra, FedOps, Product, and Compliance to embed secure practices into operations and development at scale, while maintaining audit readiness and efficient workflows.