Senior Security Engineer -FedRAMP & Vulnerability Management

Web:; Boston (MA); On-site; USD 166,000 - 186,000; Full time

Job summary

Verily Health is seeking an exceptional Information Security Engineer to support its Information Security and Privacy Risk Management functions. The role focuses on vulnerability management, regulatory reporting for FedRAMP, and alignment with FISMA/FedRAMP standards.

Ideal candidates will have strong cloud security, web app security and risk assessment experience, plus excellent communication skills to work with GRC and stakeholders.

Qualifications

• BA/BS degree in Computer Science, Engineering, or Management Information Systems.
• 5+ years of experience in Information Security or related domains.
• 3+ years experience with NIST/FedRAMP compliance audits.
• Strong knowledge of cloud security architecture, web application security, vulnerability management and security engineering.
• Excellent written and verbal communication skills.

Responsibilities

• Manage tools and inputs that are part of the Vulnerability Management program.
• Track remediation tasks and engage owners to ensure vulnerability management compliance.
• Provide regulator weekly/monthly reports for FedRAMP certifications and remediation (POA&M).
• Apply understanding of federal government compliance (FISMA, FedRAMP) to reporting of process and readiness.
• Monitor threats and validate risk using vulnerability management, scanning and red team operations.

Skills

Information security

Vulnerability management

Cloud security

Web application security

Communication skills

Education

BA/BS in Computer Science, Engineering, MIS

Tools

GCP

AWS

Kubernetes

Job description

Verily Health is seeking an exceptional Information Security Engineer to support its Information Security and Privacy Risk Management functions. The role focuses on vulnerability management, regulatory reporting for FedRAMP, and alignment with FISMA/FedRAMP standards.

Ideal candidates will have strong cloud security, web app security and risk assessment experience, plus excellent communication skills to work with GRC and stakeholders.