Note: The job is a remote job and is open to candidates in USA. Commvault is a leader in cyber resilience, helping organizations recover from cyberattacks and keep their data safe. They are seeking a Lead FedRAMP Security Engineer to implement and manage FedRAMP security controls across cloud environments, ensuring compliance and effective security operations.
Responsibilities
- Lead enterprise-wide implementation and ongoing operation of FedRAMP security controls across cloud infrastructure, security tooling, logging, vulnerability management, and incident response processes
- Own the technical health and control coverage of FedRAMP security technologies, including EDR, vulnerability scanning, CSPM, container scanning, SIEM ingestion, alerting, and evidence-producing security workflows
- Design, maintain, and validate centralized log ingestion from cloud platforms, operating systems, applications, containers, and security tools into the SIEM
- Drive vulnerability triage, remediation tracking, risk reduction reporting, and POA&M inputs in partnership with Engineering, Infrastructure, Compliance, and enterprise vulnerability management teams
- Develop and maintain technical runbooks, SOPs, control implementation evidence, and operational procedures for FedRAMP security operations
- Support FedRAMP Continuous Monitoring deliverables, including vulnerability scan results, POA&M updates, configuration reports, incident notifications, security metrics, and control evidence
- Partner with product and infrastructure teams to understand architecture, deployment patterns, authorization boundaries, inherited controls, and shared responsibility assumptions
- Serve as a senior technical point of contact for FedRAMP audits, 3PAO assessments, agency reviews, and government stakeholder discussions
Skills
- 8+ years of experience in cloud security, security engineering, infrastructure security, security operations, or related technical security roles
- 4+ years of hands-on experience supporting or operating FedRAMP-authorized or authorization-boundary cloud environments, preferably Moderate or High
- Strong working knowledge of FedRAMP, NIST SP 800-53, Continuous Monitoring, POA&M management, control implementation, and audit evidence expectations
- Hands-on experience operating or integrating EDR, SIEM, vulnerability scanning, container scanning, CSPM, logging, alerting, and security monitoring technologies
- Experience managing and operating CrowdStrike in either commercial or GovCloud instances including EDR, Cloud Security, and NG-SIEM modules
- Ability to translate FedRAMP requirements into technical designs, control implementations, operational procedures, and evidence-ready artifacts
- Experience coordinating incident response, vulnerability remediation, audit preparation, control validation, and cross-functional FedRAMP program activities
- Strong communication skills, with the ability to explain technical control posture, remediation plans, and audit findings to engineering teams, executives, auditors, 3PAOs, and government stakeholders
- Senior technical operator who can own FedRAMP security control implementation from design through evidence and audit validation
- Comfortable balancing hands-on security engineering with structured compliance, ConMon, and audit responsibilities
- Able to influence engineering, security, compliance, and external stakeholders without direct authority
- Pragmatic and detail-oriented, with strong judgment on risk, remediation priority, and audit readiness
- Accountable, organized, and able to drive complex issues to resolution in a regulated cloud environment
- Hands-on experience with AWS GovCloud and commercial AWS environments; experience with Kubernetes, containers, EKS, Lambda, and cloud-native security controls strongly preferred
- Relevant certifications such as CISSP, CCSP, AWS Security Specialty, CISM, CISA, Security+, or similar are preferred
Benefits
- Continuous professional development and product training
- Clear career growth and advancement opportunities
- Inclusive company culture
- Comprehensive global benefits package
Company Overview
Company H1B Sponsorship