{"id":2870101,"url":"https://alion.io/job/consensus-sr-information-security-engineer-fedramp","title":"Sr. Information Security Engineer, FedRAMP","company":{"id":1855198,"name":"Consensus","domain":"consensus.com","url":"https://alion.io/company/consensus-com","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":91,"open_postings":6,"ghost_share":0,"stale_share":0.167,"repost_share":0,"time_to_fill_p50_days":135,"computed_at":"2026-10-26T05:57:25Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":180000,"max":190000,"currency":"USD","period":"year","gross":null,"usd_annual":190000},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Burp Suite","optional":false},{"name":"Carbon Black","optional":false},{"name":"Crowdstrike","optional":false},{"name":"Exabeam","optional":false},{"name":"FedRAMP","optional":false},{"name":"FHIR","optional":false},{"name":"HL7","optional":false},{"name":"IAM","optional":false},{"name":"Nessus","optional":false},{"name":"NIST 800-53","optional":false},{"name":"NLP","optional":false},{"name":"Okta","optional":false},{"name":"Red Teaming","optional":false},{"name":"SentinelOne","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"GDPR","optional":true},{"name":"PowerShell","optional":true},{"name":"Python","optional":true},{"name":"Service Desk","optional":true}],"status":"live","first_seen_at":"2026-10-19T18:18:24Z","employer_posted_date":"2026-10-21","last_verified_at":"2026-10-27T02:08:43Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Consensus Cloud Solutions is a publicly traded, leading digital cloud fax and interoperability solutions organization in the United States and globally, focusing on connecting and empowering healthcare providers, payers, care teams, and technology innovators to unify multiple systems that wouldn’t otherwise talk to each other. Consensus is a trailblazer in our industry and believes that data transformation will reshape the world of healthcare.\nFounded over 25 years ago, Consensus leverages its technology heritage to move from simple digital documents to advanced healthcare standards (HL7/FHIR) for secure data transport, as well as Natural Language Processing (NLP) and Artificial Intelligence (AI) to convert unstructured to structured, analytics-ready data, helping users unveil information that is meaningful and actionable for better patient care. \nConsensus leads the industry in data exchange solutions and we’re only getting started! With exciting new initiatives on the horizon, we are continuing our strategic expansion and we are looking to add to our diverse team of innovators. \nNow is the ideal time to join us in our mission to solve healthcare’s biggest challenges, and work collaboratively with a diverse team of like-minded self-starters and partners to accomplish it. \nConsensus Cloud Solutions is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive and equitable environment for all employees. We offer many remote and hybrid career opportunities.\nHow you will impact the organization…\nThe Senior Information Security Engineer for FedRAMP plays a vital role in maintaining the organization’s FedRAMP High compliance and overall cloud security posture. This position supports the mission of delivering secure, government-compliant services by leading Security Operations (SecOps) projects, managing technical operations, and ensuring compliance with NIST 800-53 Rev 5 standards. Key responsibilities include supporting the Annual 3PAO Assessment, managing OS patching for up to 350 servers, overseeing antivirus and backup solutions, and conducting regular vulnerability scans using tools such as Nessus and Burp Suite. The engineer will oversee endpoint security with FortiClient EMS, handle authentication with Okta for Government, and manage backups with N2WS. They will ensure SOC and technical support coverage, monitor logs and intrusions using Splunk, and conduct security assessments of AWS GovCloud. Additional duties include managing Active Directory user access reviews and access controls, supporting red team and penetration testing, assisting with security impact analysis (SIA), significant change requests (SCR), continuous monitoring (ConMon), and plans of action and milestones (POAMs) in coordination with the FedRAMP GRC team, and leading incident response and disaster recovery exercises. This role also involves mentoring other engineers and supporting change management and annual assessment preparation.\nThe value you will deliver…\nProvide project management oversight of FedRAMP SecOps services.\nSupport Annual FedRAMP 3PAO assessments and security control validation.\nPerform patch management for operating systems on up to 350 servers.\nManage antivirus solutions and ensure endpoint security using FortiClient EMS.\nOversee AWS backup and disaster recovery using N2WS Backup.\nConduct monthly vulnerability scans (OS, database, containers, web apps, STIG baseline) using Nessus and Burp Suite tools and provide reporting and analysis.\nPerform rescans to confirm remediation of vulnerabilities.\nGenerate monthly security reports and conduct user access reviews.\nManage and test functional Disaster Recovery and Incident Response plans per NIST 800-53 Rev 5.\nOperate and maintain SIEM tools such as Splunk for threat detection and correlation.\nEnsure Security Operations Center (SOC) response SLAs.\nMaintain technical support services with a 15-minute callback SLA.\nPerform continuous log management and intrusion detection monitoring.\nConduct configuration consistency checks and quarterly authorized software reviews.\nManage AWS GovCloud security groups and access control list reviews.\nAdminister Active Directory account creation, password resets, and YubiKey setup.\nManage user access for production and pre-production systems, as well as security tools.\nSupport and validate annual penetration testing and red team exercises.\nConduct continuous monitoring (ConMon) and FedRAMP validation scans.\nCollaborate with the GRC team to manage and resolve SIAs, SCRs, and POAMs.\nParticipate in Incident Response and Disaster Recovery testing activities.\nContribute to Annual Assessment preparation and Significant Change Management reviews.\nMentor and guide other security engineers.\nAssist with evaluating security tools and conducting proof-of-concept testing for new technologies.\nSupport internal and external security audits beyond FedRAMP (e.g., SOC 2, HITRUST, PCI, etc.).\nProvide input on security policies, procedures, and documentation updates.\nParticipate in cross-functional project teams for infrastructure or application changes.\nDeliver internal security awareness or training sessions as needed.\nResearch emerging threats, vulnerabilities, and security trends to inform program improvements.\nAssist in vendor risk assessments and third-party security reviews.\nCreate and maintain technical runbooks, knowledge base articles, and process documentation.\nSupport response efforts for privacy incidents or data breaches involving PII/PHI.\nParticipate in industry or government security forums, working groups, or communities of interest.\nProvide backup support for other security team members during absences.\nPerform other duties and responsibilities as required, assigned, or requested. Consensus reserves the right to add or change duties at any time.\nWhat you will bring to the table…\nBachelor’s degree in cybersecurity, information technology, computer science, or a related field is preferred, but equivalent practical experience will be considered.\n5+ years of experience in security engineering or a similar technical security role.\n5+ years of hands-on experience in cybersecurity, with at least 4 years in a security engineering role.\n5+ years of experience with Vulnerability Management tools for identifying, tracking, and mitigating vulnerabilities across systems and applications. Such as Nessus Pro, Burp Suite, and SonarCube.\n5+ years of experience using Endpoint Protection tools like FortiClient Enterprise Management Server (EMS), CrowdStrike, Carbon Black, or SentinelOne to monitor and protect endpoints against threats.\n5+ years of experience with Cloud Service Providers and their Security platforms, including cloud-native application protection, cloud security posture management in tools such as AWS Security Hub.\n4+ years of experience with AWS security services such as IAM, CloudTrail, GuardDuty, and Security Hub.\n4+ years of experience implementing Security Technical Implementation Guides (STIGs) and baseline configuration management.\n4+ years of experience with AWS backup tools such as N2WS Backup for AWS backup and disaster recovery.\n4+ years of experience with One-time password systems for secure authentication, such as Okta.\n4+ years of experience with SIEM (Security Information and Event Management) platforms, such as Splunk, Elastic, or Exabeam, for detecting, analyzing, and responding to security incidents.\n4+ years of experience with Security Monitoring and Incident Response processes, such as Splunk, to manage alerts, monitor for potential threats, and respond effectively.\n2+ years of direct experience supporting FedRAMP, NIST 800-53, or similar government security compliance frameworks.\nExperience supporting FedRAMP, NIST 800-53, or other government compliance frameworks is strongly preferred.\nIndustry certifications such as CISSP, CISM, CEH, Security+, or equivalent are preferred but not required.\nHands-on experience with tools such as Nessus, Splunk, Burp Suite, FortiClient EMS, and AWS GovCloud is required.\nOngoing training and continuing education in cybersecurity best practices are encouraged.\nExperience applying compliance frameworks to support product security efforts, such as ensuring adherence to security best practices during product development and integration, particularly in cloud-based and SaaS environments.\nPractical experience performing vulnerability scanning, patch management, and incident response.\nExperience working with security tools such as Nessus, Splunk, FortiClient EMS, and Burp Suite.\nFamiliarity with cloud security, preferably within AWS GovCloud or other regulated cloud environments.\nExperience managing or supporting a Security Operations Center (SOC) or 24/7 security monitoring environment is a plus.\nDemonstrated ability to work in cross-functional teams and lead technical initiatives.\nBasic understanding of regulatory and compliance frameworks related to product security compliance, such as GDPR, CCPA, and NIST, to ensure the organization meets necessary security standards.\nExperience in security compliance frameworks, including NIST 800 53 Rev 5 and FedRAMP, to ensure adherence to regulatory requirements and security best practices.\nDemonstrates strong analytical thinking to assess complex systems, identify risks, and interpret vulnerability data.\nMaintains a high level of attention to detail when reviewing configurations, scan results, and documentation.\nPossesses strong technical proficiency with security tools, AWS GovCloud, and enterprise IT infrastructure.\nApplies effective problem-solving skills to resolve security incidents and compliance gaps.\nManages multiple concurrent security projects and meets critical deadlines.\nCommunicates technical information clearly to both technical and non-technical audiences.\nAdapts quickly to changing threats, technologies, and regulatory requirements.\nCollaborates effectively with cross-functional teams and external vendors.\nProactively identifies opportunities to improve security posture and operational efficiency.\nProvides leadership and mentorship to junior engineers, supporting team growth and development.\nYou will stand out if you also have…\nExperience supporting or leading FedRAMP High environments or other high-impact government-authorized systems.\nExperience with Plan of Action and Milestones (POAM) management and working with GRC teams.\nExposure to penetration testing and red team operations in cloud and hybrid environments.\nExperience automating security tasks using scripting languages such as Python, PowerShell, or Bash.\nKnowledge of ticketing and workflow systems like ManageEngine ServiceDesk Plus (MESD).\nAbility to contribute to policy and procedure development and documentation.\nStrong written communication skills for reporting, analysis, and compliance documentation.\nPrevious mentorship or leadership experience within a security team.\nAdditional details… \nLocation requirements: Fully remote within the U.S. \nTravel requirements: Up to 10% travel. \nPhysical requirements: Must be able to sit for long periods, as well as, handle long periods of screen time.\nTechnology requirements: Reliable, high speed internet.\nEligible for sponsorship: No.\nThis position is contingent upon satisfactory completion of a more extensive background check through the Federal Government as a Public Trust Position. Requirements include (subject to change), but are not limited to, active U.S. Citizenship or green card holder residing in the U.S. for a minimum of 3 consecutive years and working location is in the U.S.\nThe salary range for this role is $180,000 - $190,000 USD annually. The total compensation package for this position is negotiable and may also include annual performance bonus, ESPP, enhanced time off packages and benefits. This job doesn't have an expiration date and will remain open until a qualified candidate is hired. \nWe are not accepting agency submissions for this role.\nTo learn m...","description_format":"text","description_chars":12032,"description_truncated":true,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":true,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Software","Penetration Testing"],"lifecycle":[{"event":"open","at":"2026-10-19T19:18:41Z"}],"visa":[],"liveness":{"score":95,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.946,"p_room":1,"age_days":6,"expected_fill_days":135,"reasons":["conf:3","urgency","win:early"],"computed_at":"2026-10-26T05:57:25Z"},"pay":{"stated_usd_annual":190000,"is_top_pay":true},"html_url":"https://alion.io/job/consensus-sr-information-security-engineer-fedramp","json_url":"https://alion.io/job/consensus-sr-information-security-engineer-fedramp.json","meta":{"generated_at":"2026-10-27T02:31:33Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":1752,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1855198},"rest":"https://alion.io/mcp/rest/get_company?id=1855198"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fconsensus-sr-information-security-engineer-fedramp"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fconsensus-sr-information-security-engineer-fedramp"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fconsensus-sr-information-security-engineer-fedramp"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/consensus-sr-information-security-engineer-fedramp\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fconsensus-sr-information-security-engineer-fedramp"}]}