Senior Security Operations Engineer, FedRAMP

Medallia, Inc.; McLean (VA); Hybrid; USD 129,000 - 188,000; Full time

Benefits offered by this job

Health benefits

401(k)

Disability insurance

Life insurance

Parental leave

Paid holidays

Job summary

Medallia, Inc. in the Tysons area near McLean, VA, is seeking a FedRAMP security engineer focused on GRC engineering and compliance automation. This role combines security engineering with automation to defend against threats while meeting FedRAMP requirements.

The position requires hands-on coding and security tooling, with opportunities to learn new technologies in a hybrid setting, three days per week onsite in the Tysons corridor.

Qualifications

• Eligible to work in the U.S. with citizenship or a Green Card.
• 5+ years in security operations, cloud security, or security systems engineering.
• Experience writing Python to build security utilities and automate tasks.
• Experience administering enterprise security toolsets throughout their lifecycle.

Responsibilities

• Full lifecycle security tool management including selecting, deploying, integrating, maintaining security technologies.
• Security alert and incident management with focus on alerting and threat hunting automation.
• Provide technical support for compliance and security audits and serve as SME for FedRAMP controls.
• GRC engineering for compliance automation.
• Hands-on role with opportunities for coding, scripting and automation.

Skills

Python

Security Operations

Cloud Security

Tool Management

Tools

Splunk

Job description

Overview

Medallia is the pioneer and market leader in Experience Management. Our award-winning SaaS platform, Medallia Experience Cloud, leads the market in the management of experiences, insights, and actions for candidates, customers, employees, patients, and residents alike.

We believe that every experience is a memory that can last a lifetime. Experiences shape the way people feel about a company. And they greatly influence how likely people are to advocate, contribute, and stay. At Medallia, we are committed to creating a world where organizations are loved by their customers and their employees.

We empower exceptional people to create extraordinary experiences together.

Bring your whole self.

The Role and Team

We are looking for a motivated FedRAMP security engineer who is ready to explore the world of Federal Security (FedRAMP and beyond) and GRC Engineering. This role will have a heavy focus on GRC Engineering and FedRAMP compliance and security automation. This is a technical role that not only develops and implements security solutions but uses the solutions to combat malicious cyber attacks while satisfying FedRAMP compliance requirements. While Medallia FedRAMP is a well established FedRAMP certified CSP this is a growing and rapidly evolving landscape with an ever growing range of technologies, tools and a significant potential to grow within the team.

Responsibilities

• Full lifecycle security tool management including selecting, deploying, integrating, maintaining, and twilight security technologies such as SIEM's, Log Management, Vulnerability Management Platforms, AV, etc.
• Security alert and incident management with a focus on alert and threat hunting automation
• Will provide technical support for compliance and security audits and will be the subject matter expert for FedRAMP security controls during audits
• GRC Engineering for compliance automation
• This is a technical hands on position that will have opportunities for coding, scripting and automation as well as continually learning and understanding new technologies

Candidates based in the Tysons vicinity will be prioritized as this role is Hybrid, 3 days per week onsite.

Qualifications

Minimum Qualifications

• Eligibility Requirement: Must reside in the U.S. and hold U.S. Citizenship or a Green Card (Lawful Permanent Resident) to meet FedRAMP compliance requirements.
• 5+ years of progressive experience in Security Operations, cloud security, or security systems engineering (managing servers, DB, AWS cloud infrastructure, and core enterprise security tools).
• Demonstrated experience writing Python code to build security utilities, interact with APIs, and drive system automation.
• Proven track record directly administering, configuring, and managing enterprise security toolsets throughout their lifecycle.

Preferred Qualifications

• Deep practical understanding of cybersecurity fundamentals, threat models, and regulatory frameworks (specifically NIST SP 800-53 and FedRAMP Moderate/High standards) and supporting continuous monitoring in FedRAMP environments.
• Direct experience building and maintaining custom Splunk applications
• Proven ability to translate non-technical business and regulatory requirements into scalable technical solutions.
• Independent problem-solving capabilities with exceptional written and verbal cross-team communication skills.

Medallia is committed to equal pay and transparency. The annual base salary range for this position is $128,500- $188,000. Please note that the salary range information provided is a general guideline and combines all of the distinct labor markets within the US. It is uncommon for an individual to be hired at or near the top of the range for their role and compensation decisions are dependent on a variety of factors. Medallia considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, candidate's work location, education/training, key skills, internal peer equity, external market data, as well as, market and business considerations when making compensation decisions.

Medallia also offers competitive health and wellness benefits, including but not limited to medical, dental, vision, 401(k), short-term and long-term disability, life and AD&D insurance, statutory leaves, paid parental leave, and paid holidays. Benefits and eligibility may vary by location and role.

At Medallia, we celebrate diversity and recognize the value it brings to our customers and employees. Medallia is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age (40 and over), disability, genetic information, veteran status or military service, or any other status protected by state or local law. Individuals with a disability who need an accommodation to apply please contact us at [e-mail]. For information regarding how Medallia collects and uses personal information, please review our Privacy Policies. Applications will be accepted for 30 days from the date this role was posted or until the role has been filled.