Federal Cloud Vulnerability Management Analyst (US REMOTE)

Motorola Solutions•Chicago, IL

3d•Remote

About The Position

Motorola Solutions is hiring a Federal Cloud Vulnerability Management Analyst for its Product & Services Cybersecurity Team. The team advises development organizations on securing customer-facing products and services. The Federal Cloud Team guides platform and application teams through sovereign cloud requirements and authorization processes, helping products achieve authorizations, assessments, and certifications. The team works with internal leadership, external consultants, third-party assessors, customers, and government agencies. The analyst will manage the monthly vulnerability management and continuous monitoring program for a large, multi-cloud FedRAMP Class D certified and CCCS Medium/Protected B assessed environment. The role involves turning vulnerability data into Plans of Actions and Milestones (POAMs), coordinating with engineering and development teams to resolve findings, and preparing metrics and artifacts for government audiences and annual security assessments. The analyst will also help onboard product teams, manage FedRAMP 20x continuous-monitoring changes, improve processes through automation and AI agents, and maintain documentation. The position is remote and open to candidates residing anywhere in the United States. Applicants must be U.S. citizens and able to obtain any security clearance required by the government contract. Travel is under 10%, and relocation is not provided.

Requirements

Bachelor's degree and at least 4 years of professional work experience in cybersecurity.
At least 1 year of vulnerability management experience.
U.S. citizenship and ability to obtain necessary security clearance as required by a government contract.
Experience related to industry cybersecurity standards in at least one of the following: FedRAMP, NIST 800-53, GovRAMP, TX-RAMP, AZRAMP, ITSG-33 (Canadian Centre for Cyber Security), or Information Security Manual (Australia).
Experience with Google Gemini or equivalent LLM tools and Wiz.
Experience with Google Workspace.
Technical knowledge or experience in security, networking, systems administration, database administration, architecture, or another technical domain.
Strong written and verbal communication skills.
Ability to quickly grasp security-domain concepts and terminology, including governance, risk management, architecture, compliance, and operations, and express them clearly and concisely.
High integrity when handling confidential and sensitive information.
Proactive approach and enthusiasm for identifying and solving problems.
Ability to work under pressure with minimal supervision and deliver quality results on time.
Flexibility and ability to adapt to changing priorities.

Nice To Haves

Light coding skills for custom scripting.

Responsibilities

Manage the monthly vulnerability management and continuous monitoring program for a large, multi-cloud FedRAMP Class D certified and CCCS Medium/Protected B assessed environment.
Process vulnerability data into Plans of Actions and Milestones (POAMs) and drive POAM completion with engineering and development teams.
Work with engineering and development teams to complete and improve the continuous monitoring process.
Generate and manage continuous monitoring metrics for internal and external government agency audiences.
Interface with incoming government agency customers and collaboratively review continuous monitoring metrics.
Prepare continuous monitoring artifacts, including scans, POAMs, and inventories, for annual security assessments.
Work with the team lead to manage incoming FedRAMP 20x continuous-monitoring-related changes.
Onboard new Motorola product teams into the continuous monitoring program.
Improve continuous monitoring processes using automation and AI agents.
Maintain process documentation.