Senior Security Engineer, FedRAMP

Remote - USARemotePosted 6 days ago

Role Overview

Abnormal Security is hiring a Senior Security Engineer, FedRAMP. This is a full-time remote role, with the team based in Remote - USA. Part of Abnormal Security's Security hiring, posted 6 days ago. Full responsibilities, required qualifications, and the apply link are listed in the description below.

Salary Context

Salary is not disclosed in this posting. Market median for Senior-level Security roles is $144k-$190k (based on 211 comparable listings). Many employers share specifics during the interview process or after an initial screen.

Resume Keywords to Include

Make sure these keywords appear in your resume to improve ATS scoring

AWSTerraformCI/CDSaaSORTriageCompensationBenefits

Job description

About the Role

Abnormal AI is seeking a Senior Security Engineer to ensure Abnormal’s FedRAMP environment operates securely, resiliently, and efficiently. This role focuses on security operations engineering, with responsibilities spanning CI/CD pipelines, access management, patch management, change reviews, incident response, and security automation. The engineer will directly own and improve the technical workflows that keep Abnormal Gov systems compliant and resilient at scale. The ideal candidate combines deep cloud and infrastructure security expertise with operational discipline, and is AI-enabled to maximize efficiency and reduce overhead.

What you will do

Maintain and improve CI/CD pipelines to support secure deployments and infrastructure workflows.
Manage infrastructure-as-code (IaC) PR and Change Control Board reviews, ensuring changes are tested, approved, and secure before release.
Perform security impact analyses (SIAs) for system/application changes and provide recommendations.
Run OS and infrastructure patch cycles; manage hardened images and patch workflows for FedRAMP environments.
Govern access management, including account provisioning, RBAC module maintenance, and periodic reviews.
Manage logging and monitoring pipelines; tune SIEM ingestion and alerting for coverage and accuracy.
Triage and respond to security incidents, from alert investigation through containment, recovery, and after-action reporting.
Maintain and refine runbooks, SOPs, and documentation to ensure consistent operations and audit readiness.
Collaborate with DevInfra, FedOps, Product, and Compliance teams to embed secure practices into operations and development.

Must Haves

5 - 7 years in security engineering or infrastructure operations within federal or regulated cloud environments.
Strong familiarity with NIST 800-53 controls and continuous monitoring practices.
Proven delivery of AWS/SaaS security best practices.
Hands-on expertise with CI/CD, infrastructure automation, and IaC security practices.
Experience in patch management, hardened baselines, and secure image pipelines.
Strong knowledge of identity and access management (IAM) design and enforcement in large-scale environments.
Proven ability to manage SIEM pipelines and lead Tier 1/ Tier 2 incident response.
Strong technical documentation, collaboration, and incident/project management skills.

Nice to Have

Experience integrating security automation into CI/CD pipelines and SecOps workflows.
Prior experience supporting federal audits or 3PAO engagements.
Knowledge of SaaS security operations and monitoring at scale.
Experience driving automation in security operations, compliance tracking, and evidence management.
Knowledge of SaaS security operations and modern cloud environments; exposure to DevSecOps pipelines or security reviews for Terraform/containers.

#LI-JT1

Actual compensation will be determined based on several non-discriminatory factors including skills, experience, qualifications, and geographic location.
In addition to base salary, this role may be eligible for bonus or incentive compensation, equity, and a comprehensive benefits package.

Base salary range:

$153,000—$220,000 USD

AI and our hiring process
Abnormal AI uses AI-assisted tools to help our recruiting team prepare for candidate interviews. These tools analyze resume content and role requirements to suggest interview questions and identify areas for the interviewer to explore. They do not make hiring decisions or screen candidates automatically. Every decision about a candidacy is made by a person.

Abnormal AI is an equal opportunity employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability, protected veteran status or other characteristics protected by law. For our EEO policy statement please click here. If you would like more information on your EEO rights under the law, please click here.

About Abnormal Security

Abnormal Security

abnormal.ai

SecurityHires remote

37 other open roles at Abnormal Security on TryApplyNow.

View all 38 roles at Abnormal Security Visit website

Frequently Asked Questions

How do I apply for the Senior Security Engineer, FedRAMP position at Abnormal Security?

Use the Apply button above to submit your application directly to Abnormal Security. Most applications take less than 5 minutes if your resume and contact details are ready, and you'll be routed to the employer's official application system to finish.

Is the Senior Security Engineer, FedRAMP role at Abnormal Security remote?

Yes. This is a remote role. The team is based in Remote - USA, but the position itself does not require relocating to that office.

What does a Senior Security Engineer, FedRAMP at Abnormal Security earn?

Abnormal Security has not disclosed a salary range in this posting. Many employers share specifics later in the interview process; you can also ask during a recruiter screen if compensation transparency is important to you.

When was the Senior Security Engineer, FedRAMP role at Abnormal Security posted?

This role was posted on July 16, 2026 (6 days ago). It's still listed as actively hiring; we re-confirm openings against the source system multiple times per day and remove closed roles.

How much experience does the Senior Security Engineer, FedRAMP role at Abnormal Security require?

This is a senior-level position. Most senior roles call for 5+ years of directly relevant experience. Abnormal Security lists their specific requirements in the description below, so review the must-have qualifications closely before applying.

Browse Cyber Security Jobs →