Federal Cloud Vulnerability Management Analyst (US REMOTE)

Motorola Solutions•Chicago, TN

4d•$110,000 - $120,000•Remote

About The Position

Motorola Solutions is hiring a Federal Cloud Vulnerability Management Analyst for its Product & Services Cybersecurity Team and Motorola Solutions Federal Cloud (MSFC) Team. The MSFC Team guides Motorola Solutions platform and application teams through sovereign cloud requirements and authorization processes, helping secure product access to markets through authorizations, assessments, and certifications. The team works with internal leadership and external consultants, third-party assessors, customers, and government agencies in the U.S. and internationally. The analyst will manage monthly vulnerability management and continuous monitoring (ConMon) for a large, multi-cloud environment certified to FedRAMP Class D and assessed to CCCS Medium/Protected B. The role processes vulnerability data into Plans of Actions and Milestones (POAMs), works with engineering and development teams to complete remediation, produces ConMon metrics and assessment artifacts, and helps onboard product teams. The analyst will also maintain documentation, support FedRAMP 20x ConMon changes, and improve processes using automation and AI agents. The position is remote and may be based anywhere in the United States. Candidates must be U.S. citizens and able to obtain security clearance as required by a government contract. Travel is under 10%, and relocation is not provided. The target base salary range is $110,000–$120,000 USD.

Requirements

Bachelor's degree and 4+ years of professional work experience in cybersecurity.
At least 1 year of vulnerability management experience.
Experience related to industry cybersecurity standards in at least one of the following: FedRAMP, NIST 800-53, GovRAMP, TX-RAMP, AZRAMP, ITSG-33 (Canadian Centre for Cyber Security (CCCS)), or Information Security Manual (ISM - Australia).
Experience with Google Gemini or equivalent LLM tools, Wiz, and Google Workspace.
Technical knowledge and/or experience in security, networking, systems administration, database administration, architecture, or another technical domain.
Strong written and verbal communication skills.
Ability to quickly grasp security-domain concepts and terminology, including governance, risk management, architecture, compliance, and operations, and express them clearly and concisely.
Highest level of integrity in dealing with confidential and sensitive information.
Proactive approach and enthusiasm for problem identification and solving.
Ability to work under pressure with minimal supervision and deliver quality results on time.
Flexibility and ability to adapt to changing priorities.
U.S. citizenship and ability to obtain necessary security clearance as required by government contract.

Nice To Haves

Light coding skills for custom scripting.

Responsibilities

Manage the monthly vulnerability management and continuous monitoring program for a large, multi-cloud FedRAMP Class D certified and CCCS Medium/Protected B assessed environment.
Process vulnerability data into Plans of Actions and Milestones (POAMs) and drive POAM completion with engineering and development teams.
Liaise with engineering and development teams to complete and improve the continuous monitoring process.
Generate and manage ConMon metrics for internal and external government agency audiences.
Interface with incoming government agency customers and collaboratively review ConMon metrics.
Prepare ConMon artifacts, including scans, POAMs, and inventories, for annual security assessments.
Work with the team lead to manage incoming FedRAMP 20x ConMon-related changes.
Onboard new Motorola product teams into the continuous monitoring program.
Improve continuous monitoring processes with automation and AI agents.
Maintain process documentation.