Senior Security Engineer (FedRAMP)

Join Abnormal AI as a Senior Security Engineer, where you will be responsible for ensuring the security, resilience, and efficiency of Abnormal's FedRAMP environment. Your role will focus on security operations engineering, including CI/CD pipelines, access management, patch management, change reviews, incident response, and security automation. You will directly own and improve the technical workflows that keep Abnormal Gov systems compliant and resilient at scale.

• Assurer le fonctionnement sécurisé, résilient et efficace de l'environnement FedRAMP d'Abnormal, en se concentrant sur l'ingénierie des opérations de sécurité.
• Gérer et améliorer les pipelines CI/CD pour soutenir les déploiements sécurisés et les workflows d'infrastructure, en veillant à ce que les changements soient testés, approuvés et sécurisés avant leur publication.
• Triage et réponse aux incidents de sécurité, de l'investigation des alertes à la containment, la récupération et le reporting après action.
• The ideal candidate combines deep cloud and infrastructure security expertise with operational discipline, and is AI-enabled to maximize efficiency and reduce overhead
• Hands-on expertise with CI/CD, infrastructure automation, and IaC security practices
• Experience in patch management, hardened baselines, and secure image pipelines
• Proven ability to manage SIEM pipelines and lead Tier 1/ Tier 2 incident response
• Strong familiarity with NIST 800-53 controls and continuous monitoring practices
• Proven delivery of AWS/SaaS security best practices
• Strong technical documentation, collaboration, and incident/project management skills
• Strong knowledge of identity and access management (IAM) design and enforcement in large-scale environments
• 5+ years in security engineering or infrastructure operations within federal or regulated cloud environments
• Experience integrating security automation into CI/CD pipelines and SecOps workflows
• Prior experience supporting federal audits or 3PAO engagements
• Knowledge of SaaS security operations and monitoring at scale
• Experience driving automation in security operations, compliance tracking, and evidence management
• Knowledge of SaaS security operations and modern cloud environments; exposure to DevSecOps pipelines or security reviews for Terraform/containers