Teams at BeyondTrust

Owns BeyondTrust’s product vulnerability management program end to end, including FedRAMP 20x continuous monitoring, risk assessment, remediation, exception handling, metrics, evidence, and reporting. The role establishes processes for new products, automates triage and reporting, partners with Security Engineering on integrations, drives remediation across engineering teams, and leads response to actively exploited and zero-day vulnerabilities.

Owns technical execution of government compliance programs, including FedRAMP Moderate, FedRAMP 20x, TX-RAMP, IRAP, and GovRAMP. Responsibilities include continuous monitoring, SSP and SDR documentation, POA&M and remediation tracking, KSI interpretation, evidence automation, assessor coordination, compliance roadmap development, and cross-functional collaboration with engineering, security, cloud operations, legal, and agency stakeholders.

Monitor, triage, investigate, and respond to security events across enterprise and product environments. The role performs incident response, forensic analysis, detection engineering, threat intelligence, and MITRE ATT&CK coverage. It also uses AI-assisted tools, contributes to automation and LLM workflows, maintains runbooks and operational documentation, participates in on-call rotations, and supports tabletop and purple-team exercises.