Federal Cloud Vulnerability Management Analyst (US REMOTE)

Company Overview At Motorola Solutions, we believe that everything starts with our people. We’re a global close-knit community, united by the relentless pursuit to help keep people safer everywhere. We build and connect technologies to help protect people, property and places. Our solutions foster the collaboration that’s critical for safer communities, safer schools, safer hospitals, safer businesses, and ultimately, safer nations. Connect with a career that matters, and help us build a safer future. Department Overview The Product & Services Cybersecurity Team is accountable for advising and guiding our development organizations in securing our customer-facing products and services. We are a team of security architects, software security engineers, and security solutions engineers. We are passionate about what we do as it is a job like no other. This is an opportunity for you to use user cybersecurity skills to protect the people that protect us. Our customers are first responders. Fire, police, and paramedics, 911 call takers and 911 dispatchers. And when we or our loved ones place that 911 call, we become the customer of our customers. We want that call to be answered, and we want the communications between the dispatcher and the first responder to be available. But what if that 911 call center, or the communications link to the responders in the field, were under attack? What if you or your loved ones' call to 911 went unanswered, or they were unable to dispatch paramedics to your location, because they had been taken down by ransomware? This is not just theoretical, it is happening. First responders and 911 call centers are under attack around the globe, and this is a chance to fight back.

The Motorola Solutions Federal Cloud (MSFC) Team is accountable for guiding Motorola Solutions platform and application teams through the complex web of sovereign cloud requirements and authorization processes which apply to our products across the globe. Our team directly enables access to new markets for MSI by successfully guiding and governing these processes, via the achievement of various authorizations, successful assessments, and certifications for Motorola Solutions products. This team is both internally and externally facing, and leads interactions with internal Motorola Solutions leadership, as well as external consultants, 3rd party assessors, various customers, and government agencies (both US and international).

In this role you will:  Manage the monthly vulnerability management/continuous monitoring (ConMon) program for a large, multi-cloud FedRAMP Class D certified and CCCS Medium/Protected B assessed environment Process vulnerability data into a Plan of Actions and Milestones (POAM) and drive completion of POAM with engineering and development teams Liaise with engineering and development teams to complete and improve the continuous monitoring process Generate and manage ConMon metrics for internal and external government agency audiences Interface with incoming government agency customers and collaboratively review ConMon metrics Prepare ConMon artifacts (scans, POAMs, inventories, etc) for annual security assessments Work with team lead to manage incoming FedRAMP 20x ConMon-related changes Onboard new Motorola product teams into continuous monitoring program Improve continuous monitoring processes with automation and AI agents Maintain process documentation The ideal candidate must demonstrate: Experience related to industry cybersecurity standards in at least one of the following: FedRAMP, NIST 800-53, GovRAMP, TX-RAMP,  AZRAMP, ITSG-33 (Canadian Centre for Cyber Security (CCCS)), or Information Security Manual (ISM - Australia) Experience with the following tools: Google Gemini or equivalent LLM tools Wiz Google Workspace Technical knowledge and/or experience in security, networking, systems administration, database administration, architecture or another technical domain