AI Summary
Join a fully remote cybersecurity firm as a Cloud Security Engineer - Continuous Monitoring. Manage vulnerability management, compliance monitoring, and cloud security across AWS, Azure, and GCP environments. 3-5 years of experience in vulnerability management, continuous monitoring, or security operations required.
Key Highlights
Manage POA&M lifecycle
Collect and maintain security evidence
Run and analyze vulnerability scans
Key Responsibilities
Manage the full POA&M lifecycle
Collect and maintain security evidence for monthly continuous monitoring (FedRAMP, HITRUST, PCI)
Run and analyze vulnerability scans across OS, databases, web apps, and containers
Technical Skills Required
Benefits & Perks
Salary Range: $115,000 - $125,000
Medical, Dental, Vision, 401K, PTO, Sick Leave (as required), Holidays
Nice to Have
Cloud security certifications (AWS/Azure/GCP)
Security+ or CISSP
Experience with container security tools (Trivy, Anchore, Snyk) and Kubernetes
Job Description
Piper Companies is seeking a Continuous Monitoring Engineer to join a fully remote (U.S.-based) cybersecurity and compliance services firm. This client-facing cybersecurity role focuses on vulnerability management, compliance monitoring, and cloud security across AWS, Azure, and GCP environments.
Responsibilities of the Continuous Monitoring Engineer include:
- Manage the full POA&M lifecycle, including risk justifications and deviation requests.
- Collect and maintain security evidence for monthly continuous monitoring (FedRAMP, HITRUST, PCI).
- Run and analyze vulnerability scans across OS, databases, web apps, and containers.
- Identify false positives and prepare risk assessments for federal stakeholders.
- Maintain system inventories and boundary documentation.
- Support vulnerability tools (Tenable, Qualys, Rapid7, Wiz, Prisma, Microsoft Defender).
- Collaborate with engineering and SRE teams to integrate scanning into CI/CD pipelines.
- Track remediation activities and coordinate timelines with technical teams.
- Produce monthly compliance deliverables and vulnerability summaries.
- 3–5 years of experience in vulnerability management, continuous monitoring, or security operations.
- Hands-on experience scanning OS, networks, databases, containers, and web apps.
- Experience with at least two cloud platforms (AWS, Azure, GCP).
- Familiarity with FedRAMP, HITRUST, or PCI frameworks.
- Administrator-level cloud certification (AWS/Azure/GCP).
- Strong understanding of CVSS/CMSS scoring and NIST 800‑53 (RA‑5, SI‑2, CM‑6).
- Experience with STIGs, SCAP/SCC, and CIS Benchmarks.
- Scripting skills (Python, PowerShell, Bash).
- Strong communication and documentation skills.
Interested in remote work opportunities in Devops? Discover Devops Remote Jobs featuring exclusive positions from top companies that offer flexible work arrangements.
- Cloud security certifications (AWS/Azure/GCP).
- Security+ or CISSP.
- Experience with container security tools (Trivy, Anchore, Snyk) and Kubernetes.
- Familiarity with SCA and SAST/DAST tools.
- Experience integrating security controls into CI/CD workflows.
Browse our curated collection of remote jobs across all categories and industries, featuring positions from top companies worldwide.
- Fully remote (U.S.)
- Up to 10% travel
- Collaboration with engineering, SRE, compliance, and federal client teams
- Salary Range: $115,000 – $125,000
- Benefits: Medical, Dental, Vision, 401K, PTO, Sick Leave (as required), Holidays
continuous monitoring engineer, vulnerability management, continuous monitoring, POA&M, FedRAMP, HITRUST, PCI, compliance monitoring, cloud security, AWS, Azure, GCP, CVSS, CMSS, NIST 800‑53, RA‑5, SI‑2, CM‑6, STIG, SCAP, CIS Benchmarks, Tenable, Qualys, Rapid7, Wiz, Prisma, Microsoft Defender, Trivy, Anchore, Snyk, container security, Kubernetes, CI/CD, DevSecOps, SCA, SAST, DAST, automation, Python, PowerShell, Bash, security documentation, compliance evidence, 3PAO, federal security, cloud architecture, cloud governance, cloud compliance, vulnerability scanning, risk assessment, security reporting, client-facing, professional services, cloud environments, cloud operations, cloud tooling, security frameworks, zero trust, IAM, RBAC, MFA, SAML, OAuth, Linux, Windows, Agile, SCRUM, technical documentation, cloud consulting, hybrid cloud, multi-cloud.
Similar Jobs
Explore other opportunities that match your interests
Visa Sponsorship
Relocation
Remote
Job Type
Full-time
Experience Level
Mid-Senior level
classlink
United State
Visa Sponsorship
Relocation
Remote
Job Type
Full-time
Experience Level
Mid-Senior level
Bright Vision Technologies
United State
Visa Sponsorship
Relocation
Remote
Job Type
Contract
Experience Level
Mid-Senior level
Lensa
United State