[Hiring] Senior Information Security Engineer @Consensus Cloud Solutions

Role Description

The Senior Information Security Engineer for FedRAMP plays a vital role in maintaining the organization’s FedRAMP High compliance and overall cloud security posture. This position supports the mission of delivering secure, government-compliant services by leading Security Operations (SecOps) projects, managing technical operations, and ensuring compliance with NIST 800-53 Rev 5 standards.

• Support the Annual 3PAO Assessment
• Manage OS patching for up to 350 servers
• Oversee antivirus and backup solutions
• Conduct regular vulnerability scans using tools such as Nessus and Burp Suite
• Oversee endpoint security with FortiClient EMS
• Handle authentication with Okta for Government
• Manage backups with N2WS
• Ensure SOC and technical support coverage
• Monitor logs and intrusions using Splunk
• Conduct security assessments of AWS GovCloud
• Manage Active Directory user access reviews and access controls
• Support red team and penetration testing
• Assist with security impact analysis (SIA), significant change requests (SCR), continuous monitoring (ConMon), and plans of action and milestones (POAMs)
• Lead incident response and disaster recovery exercises
• Mentor other engineers
• Support change management and annual assessment preparation

Qualifications

• Bachelor’s degree in cybersecurity, information technology, computer science, or a related field is preferred, but equivalent practical experience will be considered
• 5+ years of experience in security engineering or a similar technical security role
• 5+ years of hands-on experience in cybersecurity, with at least 4 years in a security engineering role
• 5+ years of experience with Vulnerability Management tools for identifying, tracking, and mitigating vulnerabilities across systems and applications
• 5+ years of experience using Endpoint Protection tools
• 5+ years of experience with Cloud Service Providers and their Security platforms
• 4+ years of experience with AWS security services
• 4+ years of experience implementing Security Technical Implementation Guides (STIGs)
• 4+ years of experience with AWS backup tools
• 4+ years of experience with one-time password systems for secure authentication
• 4+ years of experience with SIEM platforms
• 4+ years of experience with Security Monitoring and Incident Response processes
• 2+ years of direct experience supporting FedRAMP, NIST 800-53, or similar government security compliance frameworks
• Experience supporting FedRAMP, NIST 800-53, or other government compliance frameworks is strongly preferred
• Industry certifications such as CISSP, CISM, CEH, Security+, or equivalent are preferred but not required
• Hands-on experience with tools such as Nessus, Splunk, Burp Suite, FortiClient EMS, and AWS GovCloud is required
• Ongoing training and continuing education in cybersecurity best practices are encouraged
• Experience applying compliance frameworks to support product security efforts
• Practical experience performing vulnerability scanning, patch management, and incident response
• Experience working with security tools
• Familiarity with cloud security, preferably within AWS GovCloud or other regulated cloud environments
• Experience managing or supporting a Security Operations Center (SOC) or 24/7 security monitoring environment is a plus
• Demonstrated ability to work in cross-functional teams and lead technical initiatives
• Basic understanding of regulatory and compliance frameworks related to product security compliance
• Experience in security compliance frameworks, including NIST 800 53 Rev 5 and FedRAMP
• Demonstrates strong analytical thinking to assess complex systems
• Maintains a high level of attention to detail
• Possesses strong technical proficiency with security tools
• Applies effective problem-solving skills
• Manages multiple concurrent security projects and meets critical deadlines
• Communicates technical information clearly
• Adapts quickly to changing threats, technologies, and regulatory requirements
• Collaborates effectively with cross-functional teams and external vendors
• Proactively identifies opportunities to improve security posture and operational efficiency
• Provides leadership and mentorship to junior engineers

Requirements

• Experience supporting or leading FedRAMP High environments or other high-impact government-authorized systems
• Experience with Plan of Action and Milestones (POAM) management and working with GRC teams
• Exposure to penetration testing and red team operations in cloud and hybrid environments
• Experience automating security tasks using scripting languages
• Knowledge of ticketing and workflow systems
• Ability to contribute to policy and procedure development and documentation
• Strong written communication skills for reporting, analysis, and compliance documentation
• Previous mentorship or leadership experience within a security team

Benefits

• Fully remote within the U.S.
• Up to 10% travel
• Reliable, high-speed internet required
• Salary range: $180,000 - $190,000 USD annually
• Total compensation package is negotiable and may include annual performance bonus, ESPP, enhanced time off packages, and benefits