Federal Cloud Vulnerability Management Analyst

Title: Federal Cloud Vulnerability Management Analyst (US REMOTE)

Location: United States

Work Type: Remote, Full Time

Job ID: R67717

Job Description:

At Motorola Solutions, we believe that everything starts with our people. We're a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that's critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future.

Department Overview

The Product & Services Cybersecurity Team is accountable for advising and guiding our development organizations in securing our customer-facing products and services. We are a team of security architects, software security engineers, and security solutions engineers. We are passionate about what we do as it is a job like no other. This is an opportunity for you to use user cybersecurity skills to protect the people that protect us. Our customers are first responders. Fire, police, and paramedics, 911 call takers and 911 dispatchers. And when we or our loved ones place that 911 call, we become the customer of our customers. We want that call to be answered, and we want the communications between the dispatcher and the first responder to be available. But what if that 911 call center, or the communications link to the responders in the field, were under attack? What if you or your loved ones'' call to 911 went unanswered, or they were unable to dispatch paramedics to your location, because they had been taken down by ransomware? This is not just theoretical, it is happening. First responders and 911 call centers are under attack around the globe, and this is a chance to fight back.

About the Team

The Motorola Solutions Federal Cloud (MSFC) Team is accountable for guiding Motorola Solutions platform and application teams through the complex web of sovereign cloud requirements and authorization processes which apply to our products across the globe. Our team directly enables access to new markets for MSI by successfully guiding and governing these processes, via the achievement of various authorizations, successful assessments, and certifications for Motorola Solutions products. This team is both internally and externally facing, and leads interactions with internal Motorola Solutions leadership, as well as external consultants, 3rd party assessors, various customers, and government agencies (both US and international).

Job Description

In this role you will:

• Manage the monthly vulnerability management/continuous monitoring (ConMon) program for a large, multi-cloud FedRAMP Class D certified and CCCS Medium/Protected B assessed environment

• Process vulnerability data into a Plan of Actions and Milestones (POAM) and drive completion of POAM with engineering and development teams

• Liaise with engineering and development teams to complete and improve the continuous monitoring process

• Generate and manage ConMon metrics for internal and external government agency audiences

• Interface with incoming government agency customers and collaboratively review ConMon metrics

• Prepare ConMon artifacts (scans, POAMs, inventories, etc) for annual security assessments

• Work with team lead to manage incoming FedRAMP 20x ConMon-related changes

• Onboard new Motorola product teams into continuous monitoring program

• Improve continuous monitoring processes with automation and AI agents

• Maintain process documentation

The ideal candidate must demonstrate:

• Experience related to industry cybersecurity standards in at least one of the following: FedRAMP, NIST 800-53, GovRAMP, TX-RAMP, AZRAMP, ITSG-33 (Canadian Centre for Cyber Security (CCCS)), or Information Security Manual (ISM - Australia)

• Experience with the following tools:

• Google Gemini or equivalent LLM tools

• Wiz

• Google Workspace

• Technical knowledge and/or experience in security, networking, systems administration, database administration, architecture or another technical domain

• Strong written and verbal communication skills

• Ability to quickly grasp concepts and terminology in security domains including governance, risk management, architecture, compliance, and operations and be able to express them in a clear and concise manner

• Highest level of integrity in dealing with confidential and sensitive information

• Proactive approach and enthusiasm for problem identification and solving

• Ability to work under pressure with minimal supervision and deliver quality results on time

• Flexible and able to adapt to changing priorities

• Light coding skills for custom scripting preferred

Target Base Salary Range: $110,000 USD -$120,000 USD

Consistent with Motorola Solutions values and applicable law, we provide the following information to promote pay transparency and equity. Pay within this range varies and depends on job-related knowledge, skills, and experience. The actual offer will be based on the individual candidate.

Note: Candidate can reside anywhere in the US and MUST be a US Citizen.

#LI-REMOTE

Basic Requirements

• Bachelor's Degree with 4+ years of professional work experience in cybersecurity

• AND 1+ years of vulnerability management experience

• Must be a U.S. citizen with the ability to obtain necessary security clearance as required by government contract.

Travel Requirements

Under 10%

Relocation Provided

None

Position Type

Experienced

Referral Payment Plan

Yes

Our U.S. Benefits include:

• Incentive Bonus Plans

• Medical, Dental, Vision benefits

• 401K with Company Match

• 10 Paid Holidays

• Generous Paid Time Off Packages

• Employee Stock Purchase Plan

• Paid Parental & Family Leave

• and more!

EEO Statement

Motorola Solutions is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion or belief, sex, sexual orientation, gender identity, national origin, disability, veteran status or any other legally-protected characteristic.