Senior Product Security Engineer - FedRAMP & Cloud Risk Lead

Cybersecurity Jobs; Boston (MA); On-site; USD 166,000 - 186,000; Full time

Job summary

Verily in Boston, MA is seeking a Senior Product Security Engineer onsite to strengthen Information Security and Privacy Risk Management. The role focuses on vulnerability management, regulatory readiness for FedRAMP, and coordinating remediation with system owners.

You will validate risk from threats using scanning, red team operations, and federal compliance practices such as FISMA and FedRAMP, reporting regularly to support continual authorization activities.

Qualifications

• BA/BS in Computer Science, Engineering, or MIS.
• 5 years of experience in Information Security or related domain(s).
• 3 years of experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
• Excellent written and verbal communication skills.

Responsibilities

• Manage the tools and inputs used across the Vulnerability Management program.
• Track remediation tasks with owners and stakeholders for compliance.
• Provide regulator weekly/monthly reports to support FedRAMP certifications and remediations (POA&M).
• Report on process and operational readiness using FedRAMP/FISMA experience.
• Stay current on threats and validate risk using scanning and red team operations.

Skills

Vulnerability management

FedRAMP

NIST compliance

Cloud security

Web security

Security reporting

Education

BA/BS in Computer Science or Engineering

Job description

Verily in Boston, MA is seeking a Senior Product Security Engineer onsite to strengthen Information Security and Privacy Risk Management. The role focuses on vulnerability management, regulatory readiness for FedRAMP, and coordinating remediation with system owners.

You will validate risk from threats using scanning, red team operations, and federal compliance practices such as FISMA and FedRAMP, reporting regularly to support continual authorization activities.