Sr. Information Security Technical Lead

Trend Micro; United States; Remote; USD 150,000 - 190,000; Full time

Job summary

Trend Micro is seeking a senior information security professional to lead FedRAMP operations and compliance across the Americas. You will oversee a team of L1 SOC analysts, coordinate FedRAMP lifecycle activities, and collaborate with IT, security, and development teams to ensure ongoing authorization and monitoring.

Deep FedRAMP, NIST, and cloud security expertise are essential. The role requires strong analytical, risk assessment, and communication skills, with a willingness to engage in

Qualifications

• 3+ years in information security or SOC in an enterprise environment.
• Deep knowledge of FedRAMP, NIST 800-53, RMF, FISMA and related frameworks.
• Experience with cloud services and government compliance requirements.
• Proficiency with security tooling and vulnerability management.
• Strong communication and cross-team collaboration skills.

Responsibilities

• Lead FedRAMP operations and act as Technical Lead for security cases.
• Manage a team of SOC analysts for FedRAMP monitoring and response.
• Develop and manage the FedRAMP compliance program and lifecycle.
• Coordinate with IT, security, and development teams to embed FedRAMP requirements.
• Automate SSPs, POA&M, and continuous monitoring activities.
• Conduct regular security assessments and report to leadership.
• Serve as main point of contact for FedRAMP inquiries and audits.

Skills

Information security

SOC operations

FedRAMP knowledge

GRC / compliance

Azure GovCloud

SIEM

NIST frameworks

Risk assessment

Network security

Tools

JIRA

Nessus

HCL AppScan

EDR

SIEM

Job description

As the number of cyberattacks and digital threats continue to grow, our world needs more passionate and innovative individuals who seek to be trailblazers in and shapers of the rapidly evolving cybersecurity landscape.

At Trend Micro, we offer tremendous opportunities that will challenge and equip you to become engineered to do good in whatever path you take. By choosing to be an agent of change, you will be part of an impactful mission that aims to make the world safe for exchanging digital information.

What you’ll do:

Lead and Manage FedRAMP Operations

• Act as the PH Technical Lead for processing FedRAMP security cases for Incident Management with FedRAMP Ops members of the Americas Region.
• Leverage a team of L1 SOC Analysts responsible for FedRAMP security alert monitoring.
• Overseeing security monitoring and compliance efforts

Compliance Program Development and Management

• Develop, implement, and manage the FedRAMP compliance program, ensuring that all cloud services adhere to stringent FedRAMP standards.
• Work directly with TrendMicro VisionOne/CloudOne products for Government SaaS offerings and FIPS-compliant software releases.

Lifecycle Management

• Coordinate and manage all phases of the FedRAMP lifecycle, including initial assessments, authorizations, continuous monitoring, and reauthorizations.

Collaboration and Integration

• Collaborate extensively with internal teams (IT, security, development) to integrate FedRAMP requirements into organizational processes and technology stacks.

Documentation and Automation

• Develop and maintain System Security Plans (SSP), policies, procedures, and controls to support FedRAMP compliance.
• Automate the Plan of Action & Milestones (POA&M) and other continuous monitoring requirements.

Regular Security Assessments

• Conduct regular security assessments and audits to ensure persistent compliance with FedRAMP and other relevant standards.

Change Monitoring and Compliance Adaptation

• Monitor changes in FedRAMP requirements and guidelines, adapting practices to stay compliant with the latest updates.

Guidance and Expertise

• Serve as the primary point of contact for FedRAMP inquiries and coordination with external auditors and assessors.
• Provide guidance on FedRAMP-related topics to internal teams and conduct security risk assessments.

Reporting

• Prepare and present detailed compliance reports to senior management and stakeholders, highlighting the status of FedRAMP initiatives and addressing any areas needing attention.

What you need:

• 3+ years in information security or network administration, particularly within an enterprise-level Security Operations Center (SOC).
• Strong experience with firewalls, Windows Servers, and PCs; experience with routers and switches is preferred.
• Minimum of 3 years in security compliance or Governance, Risk, and Compliance (GRC), preferably supporting U.S. public sector security authorizations.
• In-depth knowledge of Azure GovCloud, Sentinel, Nessus, HCL App Scan, JIRA, SIEM, IDS/IPS, EDR, and network monitoring tools.
• Solid understanding of FedRAMP, CMMC, NIST 800-53, NIST RMF, FISMA, and similar frameworks.
• Proficient in Windows, macOS, and Linux operating systems.
• Capable in risk management and assessment procedures.
• Skilled in network security and architecture, both wired and wireless.
• Knowledgeable in enterprise and security architecture.
• Familiarity with cloud hyperscaler services (e.g., AWS, Azure) and best practices.
• Excellent analytical, problem-solving, and project management capabilities.
• Strong communication and interpersonal skills for effective collaboration with internal teams, auditors, customers, and regulatory bodies.
• Willingness to participate in frequent international video conferences and handle security incidents during non-regular hours.

What will help

• Industry certifications such as CISSP, GCIH, GCFA, CEH, or similar are highly desirable.
• Self-motivated and fast learner, able to complete tasks with minimal supervision.
• Experience conducting company-wide third-party security risk assessments.
• Advanced expertise in FedRAMP requirements.
• Practical experience in penetration testing, threat hunting, information security management, computer forensics, incident response, or risk management.
• Experience conducting regular security audits to ensure compliance with established standards and frameworks.

Be Passionate.

Be Innovative.

Be a Trender.

Be #EngineeredToDoGood.