FedRamp Compliance Analyst
Core
Own federal security and compliance workstreams from requirement interpretation through implementation, evidence collection, and audit readiness for a FedRAMP High/Class D program.
Role type
Senior IC Federal Security and Compliance Analyst
Builds
FedRAMP High/Class D security and compliance program, compliance-as-code capabilities
Domain
US Federal Government Security / Cloud Compliance
Deliverable
production ML models | product features | dashboards & analysis | research | client delivery | infrastructure | physical/clinical work
Required skills
NIST SP 800-53, evidence collection, control documentation, vulnerability remediation, risk tracking, continuous monitoring, technical curiosity, operational discipline, automation mindset
Preferred skills
FedRAMP High/Moderate, FISMA, CMMC, GovRAMP, OSCAL, JSON/YAML schemas, AWS GovCloud, Python scripting, CI/CD workflows
Technologies
Wiz, Nessus, Burp, Jira, GitLab, Splunk, Okta, AWS GovCloud
Responsibilities
Drive recurring continuous monitoring and evidence workflows; Support vulnerability detection and response including risk-based triage and remediation; Partner with technical teams on security impact assessments and change management; Help build compliance-as-code program with structured control content and automation; Maintain accurate control, evidence, and risk records; Contribute to federal authorization and assessment artifacts; Support federal customer assurance with compliance guidance and artifacts
Seniority
Mid-Senior, hands-on IC
