Lead FedRAMP Security Engineer

Commvault is a leader in cyber resilience, helping organizations recover from cyberattacks and keep their data safe. They are seeking a Lead FedRAMP Security Engineer to implement and manage FedRAMP security controls across cloud environments, ensuring compliance and effective security operations.

Responsibilities:

• Lead enterprise-wide implementation and ongoing operation of FedRAMP security controls across cloud infrastructure, security tooling, logging, vulnerability management, and incident response processes
• Own the technical health and control coverage of FedRAMP security technologies, including EDR, vulnerability scanning, CSPM, container scanning, SIEM ingestion, alerting, and evidence-producing security workflows
• Design, maintain, and validate centralized log ingestion from cloud platforms, operating systems, applications, containers, and security tools into the SIEM
• Drive vulnerability triage, remediation tracking, risk reduction reporting, and POA&M inputs in partnership with Engineering, Infrastructure, Compliance, and enterprise vulnerability management teams
• Develop and maintain technical runbooks, SOPs, control implementation evidence, and operational procedures for FedRAMP security operations
• Support FedRAMP Continuous Monitoring deliverables, including vulnerability scan results, POA&M updates, configuration reports, incident notifications, security metrics, and control evidence
• Partner with product and infrastructure teams to understand architecture, deployment patterns, authorization boundaries, inherited controls, and shared responsibility assumptions
• Serve as a senior technical point of contact for FedRAMP audits, 3PAO assessments, agency reviews, and government stakeholder discussions

Requirements:

• 8+ years of experience in cloud security, security engineering, infrastructure security, security operations, or related technical security roles
• 4+ years of hands-on experience supporting or operating FedRAMP-authorized or authorization-boundary cloud environments, preferably Moderate or High
• Strong working knowledge of FedRAMP, NIST SP 800-53, Continuous Monitoring, POA&M management, control implementation, and audit evidence expectations
• Hands-on experience operating or integrating EDR, SIEM, vulnerability scanning, container scanning, CSPM, logging, alerting, and security monitoring technologies
• Experience managing and operating CrowdStrike in either commercial or GovCloud instances including EDR, Cloud Security, and NG-SIEM modules
• Ability to translate FedRAMP requirements into technical designs, control implementations, operational procedures, and evidence-ready artifacts
• Experience coordinating incident response, vulnerability remediation, audit preparation, control validation, and cross-functional FedRAMP program activities
• Strong communication skills, with the ability to explain technical control posture, remediation plans, and audit findings to engineering teams, executives, auditors, 3PAOs, and government stakeholders
• Senior technical operator who can own FedRAMP security control implementation from design through evidence and audit validation
• Comfortable balancing hands-on security engineering with structured compliance, ConMon, and audit responsibilities
• Able to influence engineering, security, compliance, and external stakeholders without direct authority
• Pragmatic and detail-oriented, with strong judgment on risk, remediation priority, and audit readiness
• Accountable, organized, and able to drive complex issues to resolution in a regulated cloud environment
• Hands-on experience with AWS GovCloud and commercial AWS environments; experience with Kubernetes, containers, EKS, Lambda, and cloud-native security controls strongly preferred
• Relevant certifications such as CISSP, CCSP, AWS Security Specialty, CISM, CISA, Security+, or similar are preferred