Security Engineer II

Job Description
Support Continuous Monitoring activities for FedRAMP and other compliance functions (NIST 800-53, ISO 27001, SOC audits)
• Update Continuous Monitoring documentation (POA&M, Deviation Requests, Monthly Executive Summary)
• Monitor and assess daily vulnerability reports for FedRAMP-authorized systems
• Identify, track, and report emerging threats and vulnerabilities
• Coordinate with internal teams for timely remediation
• Ensure timely submission of FedRAMP Continuous Monitoring documentation
• Liaise with internal/external auditors for FedRAMP audit support
• Monitor regulatory updates and integrate changes into monitoring processes
• Collaborate across teams to reduce risk and improve compliance
• Vulnerability Management
 · Tools: Qualys, Tenable, or other (plus, procurement experience)
 · Critical for FedRAMP
 · Assess current state of vulnerabilities
• Compliance
 · Operate compliant
 · Collect evidence for audits (gr...