Senior FedRAMP Security Engineer Remote, High-Impact

Jobgether; United States; Remote; USD 180,000 - 190,000; Full time

Benefits offered by this job

Annual bonus

ESPP

Enhanced PTO

Fully remote

Full-time employment

Job summary

Jobgether, on behalf of a partner company, seeks a Sr. Information Security Engineer focused on FedRAMP High in the United States. This fully remote role supports government security standards and cloud environments, leading security operations and vulnerability management.

You will oversee SIEM (Splunk), IAM, AWS GovCloud, 3PAO coordination, and incident response, while guiding engineers and contributing to policy, audits, and continuous monitoring in alignment with NIST SP 800-53 Revision 5.

Qualifications

• Bachelor's degree in cybersecurity, information technology, computer science, or related field.
• 5+ years of cybersecurity experience including security engineering.
• 5+ years with vulnerability management tools (Nessus Pro, Burp Suite, SonarQube).
• 5+ years with endpoint protection platforms (FortiClient EMS, CrowdStrike, Carbon Black, or SentinelOne).
• 5+ years with cloud providers and CSPM tools (AWS Security Hub).
• 4+ years of hands-on AWS security services (IAM, CloudTrail, GuardDuty, Security Hub).
• 4+ years implementing STIGs and baseline configurations.
• 4+ years with AWS backup/disaster recovery tools (N2WS).
• 4+ years with Okta or similar auth systems.
• 4+ years with SIEM (Splunk, Elastic, Exabeam).
• 2+ years supporting FedRAMP, NIST SP 800-53, or similar gov frameworks.

Responsibilities

• Lead FedRAMP security operations services and SLA alignment.
• Support 3PAO assessments, security control validation, and major change reviews.
• Manage OS patching across up to 350 servers and secure configurations.
• Administer endpoint protection and AWS backup/disaster recovery operations.
• Conduct monthly vulnerability assessments of OS, DBs, containers, apps and STIGs; report findings.
• Operate and maintain SIEM capabilities (Splunk) for threat detection and monitoring.
• Maintain SOC coverage and quick security support callbacks (15 minutes).
• Coordinate FedRAMP validation scans and quarterly software reviews.
• Assess AWS GovCloud security configurations, access controls, and permissions.
• Administer Active Directory accounts including YubiKey setup and access control.
• Support annual pen tests and red team exercises; coordinate remediations.
• Collaborate with GRC on SIAs, SCRs, and POAMs.
• Develop and test incident response and DR plans per NIST 800-53 Rev 5.
• Contribute to security policy, runbooks, and process docs.
• Support SOC 2, HITRUST, PCI audits and third-party risk reviews.
• Participate in security tool evaluations and automation opportunities.
• Address privacy incidents involving PII/PHI.
• Research threats and provide security awareness training as needed.
• Mentor engineers and provide team backups.

Skills

FedRAMP

Vulnerability management

NIST SP 800-53

AWS GovCloud

SIEM Splunk

Endpoint protection

Incident response

Patching & hardening

Okta

3PAO coordination

Leadership

Education

Bachelor's degree in cybersecurity or related field

Tools

Nessus

Burp Suite

FortiClient EMS

Splunk

N2WS Backup

Okta

Job description

Jobgether, on behalf of a partner company, seeks a Sr. Information Security Engineer focused on FedRAMP High in the United States. This fully remote role supports government security standards and cloud environments, leading security operations and vulnerability management.

You will oversee SIEM (Splunk), IAM, AWS GovCloud, 3PAO coordination, and incident response, while guiding engineers and contributing to policy, audits, and continuous monitoring in alignment with NIST SP 800-53 Revision 5.