Senior Security Operations Engineer, FedRAMP

About the role and team

We are looking for a motivated FedRAMP security engineer who is ready to explore the world of Federal Security (FedRAMP and beyond) and GRC Engineering. This role will have a heavy focus on GRC Engineering and FedRAMP compliance and security automation. This is a technical role that not only develops and implements security solutions but uses the solutions to combat malicious cyber attacks while satisfying FedRAMP compliance requirements. While Medallia FedRAMP is a well established FedRAMP certified CSP this is a growing and rapidly evolving landscape with an ever growing range of technologies, tools and a significant potential to grow within the team.

Responsibilities

• Full lifecycle security tool management including selecting, deploying, integrating, maintaining, and twilight security technologies such as SIEM’s, Log Management, Vulnerability Management Platforms, AV, etc.
• Security alert and incident management with a focus on alert and threat hunting automation
• Provide technical support for compliance and security audits and serve as the subject matter expert for FedRAMP security controls during audits
• GRC Engineering for compliance automation

This is a technical hands-on position that will have opportunities for coding, scripting and automation as well as continually learning and understanding new technologies.

Qualifications

• Eligibility Requirement: Must reside in the U.S. and hold U.S. Citizenship or a Green Card (Lawful Permanent Resident) to meet FedRAMP compliance requirements.
• 5+ years of progressive experience in Security Operations, cloud security, or security systems engineering (managing servers, DB, AWS cloud infrastructure, and core enterprise security tools).
• Demonstrated experience writing Python code to build security utilities, interact with APIs, and drive system automation.
• Proven track record directly administering, configuring, and managing enterprise security toolsets throughout their lifecycle.

Preferred qualifications

• Deep practical understanding of cybersecurity fundamentals, threat models, and regulatory frameworks (specifically NIST SP 800-53 and FedRAMP Moderate/High standards) and supporting continuous monitoring in FedRAMP environments.
• Direct experience building and maintaining custom Splunk applications
• Proven ability to translate non-technical business and regulatory requirements into scalable technical solutions.
• Independent problem-solving capabilities with exceptional written and verbal cross-team communication skills.

Pay

The annual base salary range for this position is $128,500–$188,000. Salary decisions are dependent on a variety of factors including scope and responsibilities of the position, candidate’s work experience, work location, education/training, key skills, internal peer equity, external market data, market and business considerations.

Benefits

• Health and wellness benefits including medical, dental, vision
• 401(k) with employer match
• Short-term and long-term disability insurance
• Life and AD&D insurance
• Statutory leaves and paid parental leave
• Paid holidays

Benefits and eligibility may vary by location and role.