Senior FedRAMP Security Engineer — Cloud Controls & Audits

Commvault; United States; On-site; USD 94,000 - 183,000; Full time

Benefits offered by this job

Global benefits package

Career growth opportunities

Job summary

Commvault is seeking a Lead FedRAMP Security Engineer to drive enterprise-wide FedRAMP controls across our cloud environments. The role reports to Cloud Security Operations & Security Architecture and partners with Engineering, Compliance, and auditors to ensure controls are implemented and evidenced.

You will own technical health of security technologies (EDR, CSPM, SIEM), design log pipelines, and coordinate continuous monitoring and audit readiness in a complex GovCloud and commercial AWS

Qualifications

• 8+ years in cloud security or related roles.
• 4+ years supporting FedRAMP-authorized environments (Moderate/High).
• Hands-on with AWS GovCloud and commercial AWS.
• Experience with Kubernetes, containers, EKS, Lambda, and cloud-native controls.

Responsibilities

• Lead enterprise-wide implementation and operation of FedRAMP controls.
• Own health and control coverage of FedRAMP security tech: EDR, CSPM, SIEM, logging.
• Design and validate centralized log ingestion into SIEM.
• Drive vulnerability triage, remediation tracking, POA&M inputs with multiple teams.
• Develop runbooks, SOPs, evidence, and operational procedures.
• Support Continuous Monitoring deliverables and audit readiness.
• Partner with product and infrastructure teams on architecture and boundaries.
• Serve as senior technical POC for audits and government discussions.

Skills

FedRAMP security

NIST 800-53

Cloud security

AWS GovCloud

Kubernetes

EDR tools

SIEM

Education

CISSP

CCSP

AWS Security Specialty

CISM

CISA

Security+

Tools

CrowdStrike

EDR

SIEM

CSPM

Container scanning

Job description

Commvault is seeking a Lead FedRAMP Security Engineer to drive enterprise-wide FedRAMP controls across our cloud environments. The role reports to Cloud Security Operations & Security Architecture and partners with Engineering, Compliance, and auditors to ensure controls are implemented and evidenced.

You will own technical health of security technologies (EDR, CSPM, SIEM), design log pipelines, and coordinate continuous monitoring and audit readiness in a complex GovCloud and commercial AWS