Security Engineer- FedRamp

This will be a 6 month contract to hire located hybrid in Raleigh, NC

Required Qualifications

• 2 years of experience in control assessment, third-party risk management, and/or cybersecurity
• Bachelor’s degree in Engineering, Computer Science, or equivalent professional experience
• Working knowledge of security and compliance frameworks such as FedRAMP, ISO 27001, and NIST
• Demonstrated experience in vulnerability management, including identification, assessment, tracking, and remediation across enterprise environments
• Hands-on experience with security tooling, including vulnerability scanning and SIEM platforms
• Experience supporting security automation through scripting or similar approaches
• Proficiency with Microsoft Power Automate, including building, maintaining, and troubleshooting automated workflows to support security and operational processes
• Strong analytical and problem-solving skills with the ability to work independently or collaboratively in a fast-paced environment
• Effective written and verbal communication skills, with the ability to communicate security and compliance impacts clearly to technical and non-technical stakeholders

Key Responsibilities

• Support continuous monitoring activities across federal and organizational compliance programs, including but not limited to FedRAMP, NIST 800-53, ISO 27001, and Service Organization Control (SOC) audits
• Maintain and update continuous monitoring artifacts such as Plans of Action and Milestones (POA&M), deviation or exception requests, and recurring executive-level compliance summaries
• Perform daily monitoring activities to ensure compliance of security controls across authorized systems, including review and assessment of vulnerability scan results
• Monitor, assess, and report on emerging security threats and vulnerabilities, coordinating with internal teams to facilitate timely remediation
• Ensure all required continuous monitoring documentation is completed accurately and submitted within established timelines
• Act as a liaison between internal stakeholders and external auditors by gathering, prioritizing, and distributing audit-related information
• Stay current on changes to regulatory requirements and industry standards, incorporating updates into monitoring processes to maintain authorization status
• Collaborate with multiple internal teams to reduce security risk and improve overall compliance posture
• Complete additional duties as assigned