Federal Cloud Vulnerability Management Analyst (US REMOTE)
About The Position
The Product & Services Cybersecurity Team is accountable for advising and guiding our development organizations in securing our customer-facing products and services. We are a team of security architects, software security engineers, and security solutions engineers. This role is an opportunity to use cybersecurity skills to protect first responders, including fire, police, and paramedics, as well as 911 call takers and dispatchers. The Motorola Solutions Federal Cloud (MSFC) Team guides Motorola Solutions platform and application teams through complex sovereign cloud requirements and authorization processes. This team enables access to new markets by guiding and governing these processes through authorizations, assessments, and certifications. The team interacts with internal leadership, external consultants, third-party assessors, customers, and government agencies.
Requirements
- Experience related to industry cybersecurity standards in at least one of the following: FedRAMP, NIST 800-53, GovRAMP, TX-RAMP, AZRAMP, ITSG-33 (Canadian Centre for Cyber Security (CCCS)), or Information Security Manual (ISM - Australia).
- Experience with the following tools: Wiz Google Workspace.
- Technical knowledge and/or experience in security, networking, systems administration, database administration, architecture or another technical domain.
- Strong written and verbal communication skills.
- Ability to quickly grasp concepts and terminology in security domains including governance, risk management, architecture, compliance, and operations and be able to express them in a clear and concise manner.
- Highest level of integrity in dealing with confidential and sensitive information.
- Proactive approach and enthusiasm for problem identification and solving.
- Ability to work under pressure with minimal supervision and deliver quality results on time.
- Flexible and able to adapt to changing priorities.
- Bachelor's Degree with 4+ years of professional work experience in cybersecurity AND 1+ years of vulnerability management experience.
- Must be a U.S. citizen with the ability to obtain necessary security clearance as required by government contract.
Nice To Haves
- Experience with Google Gemini or equivalent LLM tools.
- Light coding skills for custom scripting.
Responsibilities
- Manage the monthly vulnerability management/continuous monitoring (ConMon) program for a large, multi-cloud FedRAMP Class D certified and CCCS Medium/Protected B assessed environment.
- Process vulnerability data into a Plan of Actions and Milestones (POAM) and drive completion of POAM with engineering and development teams.
- Liaise with engineering and development teams to complete and improve the continuous monitoring process.
- Generate and manage ConMon metrics for internal and external government agency audiences.
- Interface with incoming government agency customers and collaboratively review ConMon metrics.
- Prepare ConMon artifacts (scans, POAMs, inventories, etc) for annual security assessments.
- Work with team lead to manage incoming FedRAMP 20x ConMon-related changes.
- Onboard new Motorola product teams into continuous monitoring program.
- Improve continuous monitoring processes with automation and AI agents.
- Maintain process documentation.
Benefits
- Incentive Bonus Plans
- Medical, Dental, Vision benefits
- 401K with Company Match
- 10 Paid Holidays
- Generous Paid Time Off Packages
- Employee Stock Purchase Plan
- Paid Parental & Family Leave
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Entry Level
