Senior Security Engineer, FedRAMP
Abnormal Security2 months ago
Base Salary
$153k - $220k/yr
Responsibilities
- Build secure delivery workflows and policy gates for applications and infrastructure deployed to the federal environment.
- Integrate security scanning, control validation, and infrastructure-as-code reviews into delivery workflows.
- Build hardened system image pipelines and automate patch testing, rollout, validation, exception management, and compliance reporting.
- Design and enforce cloud identity, access, organization, resource, and configuration controls.
- Build preventive guardrails that block insecure or unauthorized configurations.
- Own security logging and monitoring pipeline reliability, including ingestion coverage, data quality, source health, retention, and alerting.
- Develop telemetry health checks, tune detections, and build automation for alert enrichment, evidence preservation, investigation, and containment.
- Lead security incident response, including investigation, containment, recovery, evidence preservation, and after-action reporting.
- Partner with cross-functional infrastructure, security, operations, incident response, and compliance teams.
Requirements
- 8+ years of experience in cloud security engineering, DevSecOps, infrastructure security, or a closely related engineering discipline.
- Deep hands-on experience with AWS.
- Strong experience building or securing cloud deployment pipelines and infrastructure-as-code workflows.
- Proficiency in at least one scripting or programming language, preferably Python, with experience automating recurring operational work.
- Working knowledge of identity and access management design and enforcement in large cloud environments.
- Production experience with security monitoring and incident response, including investigation, containment, recovery, and operational follow-through.
- Experience integrating security automation into CI/CD or SecOps workflows is preferred.
- Experience with federal audits, 3PAO engagements, FedRAMP, DoD IL4, DoD IL5, NIST SP 800-53, continuous monitoring, or technical evidence requirements is preferred.
- Experience with SaaS security operations, Terraform or container security reviews, compliance automation, continuous control monitoring, or automated evidence management is preferred.
Benefits
- Base salary range is $153,000—$220,000 USD.
- The role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.
- The position supports a FedRAMP-authorized federal environment and includes regulated-cloud security and compliance work.
About Abnormal Security
Abnormal Security builds an AI-based cloud email and SaaS security platform for enterprises, preventing phishing, business email compromise, and account takeover. Its products integrate natively with Microsoft 365, Google Workspace, and other business apps, delivered as a subscription service. Founded in 2018 and headquartered in Las Vegas, Nevada, the privately held company focuses on securing large organizations’ email and connected applications.