Be an early applicantLess than 25 applicants

Company

RingCentral · 22 hours ago

FedRamp Continuous Monitoring Analyst (Remote USA) (must be US citizen)

DFW Metroplex

Full-time

Remote

Mid Level

$140K/yr - $170K/yr

Maximize your interview chances

Cloud ComputingCollaboration

No H1B

U.S. Citizen Only

Insider Connection @RingCentral

Discover valuable connections within the company who might provide insights and potential referrals.
Get 3x more responses when you reach out via email instead of LinkedIn.

Responsibilities

Collaborate with team members to help manage the continuous monitoring (ConMon) program, including internal and external reporting on vulnerabilities, tracking POA&Ms, and developing ConMon artifacts

Interface with stakeholders at all levels of the organization and agency, FedRAMP PMO, consultants, and the 3PAO assessment team as required to maintain certification.

Join the recurring agency ConMon meetings; including the review and submission of required artifacts

Assist with the annual 3PAO security assessment from initiation to project closure

Generate or facilitate deviation requests as required

Perform functions as assigned in support of the Continuous Monitoring efforts.

Conduct continuous monitoring activities to assess the effectiveness of security controls and identify potential vulnerabilities or non-compliance issues.

Maintain and update the organization's System Security Plan (SSP) and other documentation required for FedRAMP compliance.

Monitor security alerts and incidents, investigate and analyze security events, and coordinate appropriate response actions.

Develop and implement procedures for security incident detection, response, and reporting, in accordance with FedRAMP requirements.

Conduct periodic risk assessments and vulnerability scans to identify emerging threats and ensure timely mitigation.

Prepare and present regular reports on the status of FedRAMP compliance activities to management and relevant stakeholders.

Coordinate efforts to obtain and maintain FedRAMP certification

Edit/update POAM documentation

Qualification

Find out how your skills align with this job's requirements. If anything seems off, you can easily click on the tags to select or unselect skills to reflect your actual expertise.

FedRAMP Continuous MonitoringVulnerability managementSEC+ certificationNIST StandardsRisk assessmentsPOA&M managementCloud service offeringsSCR processes

Required

Proven experience in FedRAMP Continuous Monitoring activities.

Knowledge and experience in large, hybrid FedRAMP programs

Familiarity with vulnerability management concepts, such as CVE and CVSS.

Ability to quickly change priorities and handle simultaneous tasks.

Strong analytical and problem-solving skills.

Excellent communication and interpersonal skills.

Ability to work independently and as part of a team.

To comply with U.S. federal government security requirements, U.S. citizenship is required and your employment will be conditioned upon obtaining the Public Trust Verification.