Security Compliance Lead

The role

Vulcan sells legal intelligence to state agencies and is moving into federal work. FedRAMP is the federal government's security standard for cloud services; we run an environment that already implements most of the required controls and are working toward full federal agency authorization to operate.

You own: the System Security Plan, 3PAO engagement, the POA&M, and continuous monitoring. You also own Security questionnaires, audits, and the security sections of RFIs and RFPs.

What we're looking for

• Understanding of cloud security and compliance
• Engineering experience and ability
• Competence with agentic coding

Nice to have

• Experience taking a package through a 3PAO audit
• Experience going through an agency authorization
• Experience running continuous monitoring (ConMon)
• Understanding of FedRAMP

How we work

We work 996: 9am to 9pm, six days a week, in the Austin office. There is no remote option and no hybrid schedule.

We are a small company attempting a federal certification on a timeline most companies take three years to reach, while continuing to ship product and onboard state customers.