Senior Security Engineer: FedRAMP & Cloud Vulnerability Lead

Verily Health; Boston (MA); On-site; USD 166,000 - 186,000; Full time

Job summary

Verily Health is seeking an exceptional information security engineer to support our Information Security and Privacy Risk Management function. This role combines a deep understanding of security technologies with a strong governance mindset to ensure ongoing compliance and vulnerability management across the organization.

You will work closely with the Governance, Risk and Compliance team to monitor controls, report on readiness, and stay ahead of threats with hands-on vulnerability assessment

Qualifications

• BA/BS degree in Computer Science, Engineering, or Management Information Systems.
• 5 years of experience in Information Security or related domain(s).
• 3 years experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security architecture, web application security, vulnerability management, and security engineering.
• Excellent written and verbal communication skills.

Responsibilities

• Manage tools and inputs that are part of the Vulnerability Management program.
• Track remediation tasks and engage with owners to ensure compliance.
• Provide regulator weekly/monthly reports for FedRAMP certifications and remediation status.
• Apply understanding of federal government compliance (e.g., FISMA, FedRAMP) to reporting and readiness.
• Stay abreast of threats and validate risk using vulnerability management, scanning and red team operations.

Skills

Vulnerability management

NIST/FedRAMP

Cloud security

Web application security

Security engineering

Communication skills

Education

BA/BS in Computer Science, Engineering, MIS

Tools

Kubernetes

GCP

AWS

Job description

Verily Health is seeking an exceptional information security engineer to support our Information Security and Privacy Risk Management function. This role combines a deep understanding of security technologies with a strong governance mindset to ensure ongoing compliance and vulnerability management across the organization.

You will work closely with the Governance, Risk and Compliance team to monitor controls, report on readiness, and stay ahead of threats with hands-on vulnerability assessment