Opportunity at
ElasticPrincipal Security Compliance Analyst - Public Sector - InfoSec
Elastic seeks a Principal Security Compliance Analyst to oversee its FedRAMP Moderate program. The role is full-time, located in the United States, and marked on-site. The…
Career Tools
About This Role
Elastic seeks a Principal Security Compliance Analyst to oversee its FedRAMP Moderate program. The role is full-time, located in the United States, and marked on-site. The analyst is accountable for the full life cycle of the FedRAMP Moderate authorization and ongoing monitoring. That includes keeping the System Security Plan and its supporting material current, covering policies, procedures, control evidence, asset inventories and architecture diagrams. The job also involves organizing audits…
Job Description
Elastic seeks a Principal Security Compliance Analyst to oversee its FedRAMP Moderate program. The role is full-time, located in the United States, and marked on-site.
The analyst is accountable for the full life cycle of the FedRAMP Moderate authorization and ongoing monitoring. That includes keeping the System Security Plan and its supporting material current, covering policies, procedures, control evidence, asset inventories and architecture diagrams. The job also involves organizing audits and reviews with the 3PAO, federal agency partners, outside consultants and internal departments, and following each security finding and POA&M entry until it is resolved.
Working relationships reach Legal, Product, IT, Engineering and Security, because the analyst helps put required controls into practice and keeps them running. Reviewing system and product changes for their FedRAMP effects is routine, as is advising control owners on their duties and the evidence they must gather. Deadlines, risk levels and compliance indicators are reported to leadership.
The best fit has hands-on experience with the FedRAMP framework, NIST 800-53 controls and ongoing monitoring duties, sound project management habits, and the ability to explain technical and audit matters to engineers, examiners and government clients. The listing describes Elastic as a company whose cloud products span search, security and observability.
Pay is base salary without a variable portion. The typical range is USD 159,800 to 252,800. In select metropolitan areas named in the posting, such as Seattle, Los Angeles, the San Francisco Bay Area and New York City, the typical range is USD 191,900 to 303,500. Stock program participation is also part of the package.
Responsibilities
- Lead the full cycle of FedRAMP Moderate authorization and ongoing monitoring
- Keep the System Security Plan, policies, control evidence, inventories and diagrams current
- Organize assessments and reviews with the 3PAO, federal agency partners, outside advisers and internal staff
- Follow security findings and POA&M entries through to closure
- Work alongside Legal, Product, IT, Engineering and Security to put required controls in place
- Report deadlines, risks and compliance metrics to leadership
- Assess system and product changes for FedRAMP implications
- Advise control owners on their duties and the evidence they must prepare
Requirements
- Five-plus years running or helping operate a FedRAMP Moderate program
- Thorough understanding of FedRAMP rules, NIST 800-53 controls and ongoing monitoring duties
- Practical record handling SSP documents, POA&M logs, control evidence, vulnerability programs and security testing
- Strong project management and organizing skills
- Clear communication with engineers, auditors, government officials and executives
- Eligibility to work within Department of Defense Impact Level 4 or higher cloud environments
Core Skills
Benefits
- 401k employer match, dollar for dollar up to six percent of eligible earnings
- Participation in the stock program
- Health coverage that reaches families in many regions
- Schedule and location flexibility across numerous roles
- Generous yearly vacation allowance
- Matching of donations and volunteer effort up to $2,000 (or local equivalent)
- Volunteer time of up to 40 hours a year for causes the employee chooses
- Parental leave of at least 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the position?
The listing places it in the United States and marks it as on-site.
How much FedRAMP experience is wanted?
At least five years running or helping operate a FedRAMP Moderate program is required.
What is the salary?
The typical base salary is USD 159,800 to 252,800, or USD 191,900 to 303,500 in listed select metro areas. There is no variable pay.
Are there eligibility conditions?
Yes. Candidates need eligibility for cloud service environments at Department of Defense Impact Level 4 or higher.
How do I apply?
The posting does not explain the application process beyond a contact for accommodation requests.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.