SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 195,000 - 220,000 / annual
Forerunner builds intelligent software that connects fragmented systems in government and regulated industries, turning disconnected data into actionable decisions that reduce liability and prevent emergencies.
As Senior Security & Infrastructure Engineer, you will own the end-to-end security and compliance posture of Forerunner's AWS infrastructure, with primary focus on FedRAMP authorization (targeting Moderate level). You'll be one of the first dedicated security engineering hires, partnering directly with the compliance lead and a 12-person engineering team across two product teams.
Key responsibilities include: owning the authorization boundary, KSI evidence collection, and continuous monitoring for AWS us-east-1 commercial environment; driving FedRAMP execution including machine-readable evidence in Vanta, control implementation, and 3PAO coordination through assessment and Marketplace listing; hardening and modernizing production infrastructure through infrastructure-as-code, network segmentation, secrets management, logging/detection in Datadog, and incident response; embedding compliance into CI/CD and developer workflows as defaults rather than review gates; and partnering with engineering teams to ensure security decisions integrate seamlessly into product development.
You bring deep AWS experience and strong infrastructure-as-code fundamentals. You've navigated a FedRAMP authorization before (Agency or JAB, Moderate or above) and can speak candidly about what actually consumed time and resources. You're comfortable owning both the engineering and the compliance paperwork—writing control narratives and fixing the Terraform that implements them. Experience with SOC 2, StateRAMP, TX-RAMP, continuous monitoring tooling, and threat modeling is expected. Bonus skills include Node/TypeScript environments, PostGIS, and prior GovTech or public sector delivery experience.
Forerunner is mission-driven, focused on helping communities prepare against natural disasters through better infrastructure management. The team is small, interdisciplinary, and values in-person connection while supporting remote work. Offices are in NYC, San Francisco, and Portland, ME. The company offers competitive compensation, comprehensive health coverage, 401k, and wellness reimbursement.