Information Security Analyst II, Federal Programs

What you'll do

• Support security efforts to achieve U.S. Government certifications including FedRAMP, GovRAMP, and DoD Cloud Computing SRG.
• Design, implement, and monitor security and compliance features in collaboration with engineering teams.
• Manage the complete internal and external assessment and audit lifecycle for federal programs.
• Design and maintain defensive policies to protect against an evolving threat landscape.
• Synthesize complex customer documents into concrete technical requirements for Engineering, Legal, and Finance teams.
• Evaluate the suitability of AI-backed products for Federal regulated industry customers.
• Leverage AI to build automations that demonstrate compliance with current and future requirements.
• Communicate directly with customers, auditors, and regulators to explain the company's compliance posture.

What we're looking for

• You must have a BS degree and a minimum of 5 years of relevant industry experience.
• You must have a proven track record in security policy, compliance, information security operations, or security consulting.
• You must have a strong understanding of cloud services architecture, specifically Amazon Web Services.
• You must have experience designing, supporting, and assessing security controls for FedRAMP certified or DoD Impact Levels ⅵ authorized systems.
• You must have experience implementing the Cloud Computing Security Requirements Guide, STIGs, and working with eMASS.
• You must have managed or implemented Federal continuous monitoring activities with external stakeholders.
• Eligibility to obtain a US Government Security Clearance or a current active adjudicated Public Trust Background Investigation is a plus (preferred).
• Export control regulations, candidates should be eligible for any.