Senior Security Engineer, FedRAMP

Stack

Responsibilities

• ▹Maintain and improve CI/CD pipelines for secure deployments
• ▹Manage IaC PR and Change Control Board reviews
• ▹Perform security impact analyses (SIAs) for system/application changes
• ▹Run OS and infrastructure patch cycles; manage hardened images
• ▹Govern access management: provisioning, RBAC, periodic reviews
• ▹Manage logging and monitoring pipelines; tune SIEM ingestion and alerting
• ▹Triage and respond to security incidents through after-action reporting
• ▹Maintain runbooks, SOPs, and documentation for audit readiness
• ▹Collaborate with DevInfra, FedOps, Product, and Compliance teams

Requirements

• ▹5-7 years in security engineering or infrastructure operations in federal/regulated cloud environments
• ▹Strong familiarity with NIST 800-53 controls and continuous monitoring
• ▹Proven delivery of AWS/SaaS security best practices
• ▹Hands-on CI/CD, infrastructure automation, and IaC security experience
• ▹Experience in patch management, hardened baselines, and secure image pipelines
• ▹Strong IAM design and enforcement knowledge in large-scale environments
• ▹Ability to manage SIEM pipelines and lead Tier 1/2 incident response
• ▹Strong technical documentation and project management skills

Nice to have

• ▹Integrating security automation into CI/CD and SecOps workflows
• ▹Prior experience supporting federal audits or 3PAO engagements
• ▹Knowledge of SaaS security operations and monitoring at scale
• ▹Driving automation in security operations and compliance tracking
• ▹Exposure to DevSecOps pipelines or Terraform/container security reviews

Soft skills

What we offer

• ▹Base salary range: $153,000–$220,000 USD
• ▹Eligible for bonus or incentive compensation
• ▹Equity
• ▹Comprehensive benefits package

About the company

Abnormal AI protects customers from sophisticated cyber threats using behavioral AI, trusted by more than 25% of the Fortune 500 for email security.