Senior Product Security Engineer — FedRAMP & Vulnerability Lead

Verily Health; Dallas (TX); On-site; USD 166,000 - 186,000; Full time

Benefits offered by this job

Bonus

Equity

Benefits

Job summary

Verily Health is seeking an exceptional information security engineer to support our Information Security and Privacy Risk Management function. The role blends hands-on security with governance, risk, and compliance activities to ensure ongoing FedRAMP readiness and regulatory reporting.

The ideal candidate has a BA/BS in a technical field, 5 years in information security, 3 years in NIST/FedRAMP audits, and strong cloud/web security and vulnerability management expertise.

Qualifications

• BA/BS degree in Computer Science, Engineering, or MIS.
• 5 years of experience in Information Security or related domains.
• 3 years experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security, web application security, Vulnerability management, and security engineering.
• Excellent written and verbal communication skills.

Responsibilities

• Manage vulnerability management tools and inputs.
• Track remediation tasks and coordinate with system owners and stakeholders to ensure vulnerability management compliance.
• Provide regulator weekly/monthly reports for FedRAMP readiness and remediation efforts (POA&M).
• Apply understanding of federal government compliance (FISMA, FedRAMP) to report on process readiness.
• Keep abreast of new threats and validate risk using vulnerability management, scanning and red team operations.

Skills

Information security

Vulnerability management

Cloud security

Web application security

Security engineering

Communication skills

Education

BA/BS in Computer Science, Engineering, or MIS

Job description

Verily Health is seeking an exceptional information security engineer to support our Information Security and Privacy Risk Management function. The role blends hands-on security with governance, risk, and compliance activities to ensure ongoing FedRAMP readiness and regulatory reporting.

The ideal candidate has a BA/BS in a technical field, 5 years in information security, 3 years in NIST/FedRAMP audits, and strong cloud/web security and vulnerability management expertise.