← All roles

Principal Security Compliance Analyst - Public Sector - InfoSec

Elastic· InfoSec
Apply on company site
RemoteFull-timePosted 1mo ago

About the role

Lead the FedRAMP Moderate program and manage Elastic's public sector security compliance initiatives, collaborating cross-functionally to maintain and enhance FedRAMP authorization and continuous monitoring.

Responsibilities

  • Manage the FedRAMP Moderate authorization and continuous monitoring program.
  • Maintain the System Security Plan, policies, procedures, evidence, inventories, diagrams, and other required documentation.
  • Coordinate assessments and reviews with our 3PAO, federal agency partners, consultants, and internal teams.
  • Track security findings and POA&M items through remediation.
  • Work with Security, Engineering, IT, Product, and Legal teams to implement and maintain required controls.
  • Monitor program deadlines, risks, and compliance metrics and report progress to leadership.
  • Review system and product changes for potential FedRAMP impact.
  • Help control owners understand their responsibilities and prepare appropriate evidence.

Qualifications

  • 5+ years of experience managing or supporting a FedRAMP Moderate program.
  • Strong understanding of FedRAMP, NIST SP 800-53, and continuous monitoring requirements.
  • Experience with SSPs, POA&Ms, control evidence, vulnerability management, and security assessments.
  • Strong project-management and organizational skills.
  • Ability to communicate effectively with technical teams, auditors, government stakeholders, and company leadership.
  • Eligible to work in Department of Defense (DoD) Impact Level 4 or above cloud service environments.

Skills

Required:FedRAMP Moderate program managementFedRAMPNIST SP 800-53SSP/POA&M

Benefits

  • Stock program participation
  • Company-matched 401k up to 6%
  • Health coverage for employee and family in many locations
  • Flexible locations and schedules
  • Generous vacation days
  • Volunteer program with up to 40 hours/year
  • Parental leave of at least 16 weeks
Last updated Sep 17, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database
Company profileWebsite

More open roles at Elastic