--- title: 'Senior Compliance Analyst - Cloud Security at Knox Systems' canonical: 'https://feeny.ai/job/senior-compliance-analyst-cloud-security-knox-systems-united-states-arlington-va-yzvaezpj30nt' type: 'job' last_seen: '2026-10-13' --- # Senior Compliance Analyst - Cloud Security at Knox Systems - **Company:** Knox Systems - **Location:** United States / Arlington, VA - **Employment:** full-time - **Work type:** onsite - **Posted:** 2026-10-05 - **Last confirmed live:** 2026-10-13 - **Apply:** https://jobs.ashbyhq.com/knox-systems/97d4d7a4-8101-4fc2-b27f-1f6209e827ef ## Job description ## About Knox Knox runs the largest Federal & DoW managed cloud, building and operating secure cloud and AI environments that support the U.S. government’s most critical missions — from national security and public safety to essential public services. Our customers rely on Knox to deploy production systems that meet the highest standards for security, reliability, and compliance. Work at Knox is high-impact and purpose-driven. The problems we solve are high-stakes, the expectations are high, and the results are visible. Speed, rigor, and trust matter here - because the environments we secure cannot fail. Your contributions are visible, your expertise is relied upon, and the impact of your work is immediate and measurable. We operate at federal scale, securing some of the most sensitive government environments in the country - because the systems we build must perform without fail. Knox is seeking a Senior Compliance Analyst with strong technical and regulatory expertise to help ensure Knox and its customers continuously meet federal and commercial compliance requirements. This role is responsible for driving ongoing compliance across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, and GovRAMP environments while partnering closely with Security, DevOps, Operations, and customer teams. This is not a point-in-time audit support role. This position is expected to operate as a technical compliance lead who can validate controls in cloud environments, track remediation and POA&M performance, enforce compliance SLAs, support audits and assessments, and provide clear risk visibility to internal leadership and customers. ## Key Responsibilities ● Own continuous compliance oversight for Knox and assigned customer environments across FedRAMP, FISMA, NIST 800-53, IL4, IL5, CMMC, SOC 2, StateRamp, GovRAMP, and related frameworks. ● Track and enforce compliance obligations, remediation deadlines, POA&M milestones, vulnerability remediation timelines, and continuous monitoring requirements. ● Review and validate technical control implementation across AWS, Azure, and GCP environments, including logging, monitoring, IAM, incident response, vulnerability management, endpoint security, network segmentation, and change management. ● Partner with Security Operations, Compliance, DevOps, Engineering, and customer teams to ensure required controls are implemented and operating effectively. ● Support FedRAMP authorization and ongoing assessment activities, including SSP updates, evidence collection, ConMon support, 3PAO coordination, audit preparation, and customer artifact reviews. ● Evaluate findings and weaknesses using both compliance requirements and operational risk, including exploitability, exposure, compensating controls, and customer responsibility boundaries. ● Maintain visibility into customer compliance posture and ensure customers meet shared-responsibility obligations and required service-level timelines. ● Manage all customer-facing compliance activities, including coordinating Continuous Monitoring (ConMon) submissions, leading POA&M reviews, managing Security Change Requests/Notifications (SCR/SCN) with customers, and acting as a primary liaison for agency communication. ● Prepare dashboards, metrics, and executive reporting for overdue findings, POA&Ms, control gaps, remediation status, audit readiness, and overall compliance posture. ● Escalate material compliance gaps, SLA misses, and recurring customer issues to Knox leadership with clear recommendations and risk context. ● Help improve Knox’s compliance processes, templates, playbooks, and automation capabilities, leveraging compliance-as-code and KnoxAI, to support scalable, repeatable, and audit-ready operations. ## Qualifications ● 7+ years of experience in cybersecurity compliance, GRC, cloud security, or related security assurance roles. ● Direct experience with FedRAMP and NIST SP 800-53 in cloud or SaaS environments. ● Strong working knowledge of FISMA, SOC 2, StateRamp, GovRAMP, and at least one of the following: IL4, IL5, CMMC, NIST 800-171. ● Experience supporting audits, assessments, or authorization activities in regulated cloud environments. ● Strong understanding of cloud platforms such as AWS, Azure, and/or GCP and how security controls are implemented within them. ● Experience partnering with technical teams such as DevOps, SOC, SRE, Engineering, or IT Operations to validate control implementation and drive remediation. ● Ability to manage multiple customers, priorities, deadlines, and dependencies in a fast-paced environment. ● Strong written and verbal communication skills, including the ability to explain compliance requirements, technical findings, and risk decisions clearly to both technical and non-technical stakeholders. ## Preferred Qualifications ● Experience with FedRAMP High and/or DoD IL4 / IL5 environments. ● Experience working with continuous monitoring, POA&M governance, vulnerability remediation tracking, and customer audit readiness. ● Familiarity with cloud/security tooling such as CSPM, SIEM, EDR/XDR, ticketing/GRC platforms, and evidence automation workflows. ● Experience with shared responsibility models in managed cloud or regulated SaaS environments. ● Certifications such as CISSP, CISA, CAP, Security+, CCSP, or cloud security certifications. ● Experience in a high-growth cloud company, managed services provider, or regulated SaaS provider. Success in This Role ● Knox and assigned customers maintain strong compliance posture with minimal overdue remediation items. ● Audit and assessment artifacts are complete, accurate, and ready when needed. ● Control gaps are identified early and driven to closure. ● Customers clearly understand what they own, what Knox owns, and what deadlines must be met. ● Leadership has accurate, timely visibility into compliance health, risk, and SLA performance. Compensation Range: $135-$165k, variable annual bonus, and equity ## Benefits & Perks Knox offers a competitive employee benefits package including Medical, Dental, Vision, Life & Disability, unlimited PTO, and an employee funded 401k plan. Please note, benefits are subject to change. We are an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Employment decisions are made without regard to race, color, religion, sex, sexual orientation, gender identity or expression, national origin, age, disability, veteran status, or any other legally protected status. Knox is proud to support veteran hiring — we encourage veterans and transitioning service members to apply and welcome the unique skills and experience you bring. Hiring Requirement: Due to the nature of our work with federal government clients and compliance with applicable regulations, this position requires U.S. citizenship. Dual citizenship is not permitted for this role. Candidates must be able to provide documentation verifying sole U.S. citizenship status as part of the background check process. Any offer of employment is contingent upon the successful completion of all required pre-employment screenings, including a background check, in accordance with applicable laws and government contract requirements. ## About Knox Systems ## Company Overview - **One-liner**: Knox Systems provides a managed cloud infrastructure and compliance platform that accelerates FedRAMP authorization for SaaS companies to 90 days at 90% lower cost. - **Entity Type**: Private (Venture-backed; Series A) - **Headquarters**: Austin, Texas, United States - **Founded**: 2025 - **Founders**: Not publicly available ## Core Business - **Primary Industry**: Computer and Network Security (FedRAMP / Government Cloud Compliance) - **Target Customers**: B2B SaaS companies that need to deploy in FedRAMP Moderate, High, or DoD IL4 environments to sell to U.S. federal and defense agencies. - **Mission Statement**: “FedRAMP in 90 Days for 90% Less.” ## Products & Services - **Knox Cloud**: A managed cloud infrastructure platform that provides single-tenant isolation for every customer application. Deployed on AWS, Azure, and GCP. Includes pre-built architecture and CI/CD pipeline integration. - **KnoxAI**: A proprietary AI-powered monitoring and issue remediation engine trained on 10 years of federal audit data. Handles real-time security monitoring, contextual decision-making, and compliance artifact generation. - **FedRAMP Authorization Service**: A turnkey service that handles the full authorization process, including architecture review, scanning, remediation, and sponsor management. Customers inherit Knox’s existing 15+ ATOs, eliminating the need to find a sponsoring agency. ## Market Standing - **Valuation**: Not publicly available - **Total Funding**: USD 31.5M - Seed Round (August 2025): USD 6.5M led by **Felicis** with 3 investors - Series A (March 2026): USD 25M led by **B Capital** with 7 investors - **Key Metric**: 20+ customers authorized in 90 days or less; 16 federal sponsors (including FEMA for Fed High); 15+ ATOs across civilian and DoD agencies. - **Notable Investors/Partners**: B Capital, Felicis, Irina Denisenko (CEO). The platform is battle-tested from running enterprise applications for Adobe, Celonis, and BigID. - **Growth Signals**: 1,250% headcount growth YoY (4 to 43 employees); monthly headcount growth of 8%. Actively hiring across engineering, DevOps, security, and go-to-market roles. Recently announced 16th federal sponsor. ## Competitive Advantages - **Speed and Cost**: 90-day timeline versus the traditional 12–24 month FedRAMP process; claims 90% cost reduction vs. doing it in-house. - **Sponsor Network**: Customers do not need to find a federal sponsor—they inherit Knox’s 15+ existing ATOs across DHS, FEMA, Marines, Treasury, VA, and others. - **Single-Tenant Isolation**: Dedicated, isolated sub-account per customer (no shared tenant data), reducing blast radius and preventing lateral movement. - **Proven Track Record**: 10 years of experience running enterprise applications in federal environments; 100% success rate despite government shutdowns. - **AI-Native Compliance**: KnoxAI is trained on 10 years of audit data and achieves 99% audit artifact coverage. ## Strategic Focus - **Platform Expansion**: Targeting DoD IL5 authorization by late 2026. - **Multi-Cloud Depth**: Deepening integrations with AWS, Azure, and GCP to remain cloud-agnostic. - **Go-to-Market Scaling**: Building out channel and demand generation teams (open roles: Director of Channels, Director of Demand Generation & ABM). - **Product Development**: Enhancing KnoxAI capabilities including contextual decision engine, QA agents, compliance reasoning model, and analytics insight engine. ## Why Work Here - **Mission-Driven Impact**: Directly enable U.S. government digital transformation by helping innovative SaaS companies get to FedRAMP quickly and securely. - **Growth Trajectory**: Rapidly scaling startup (43 employees, +1,250% YoY) with significant Series A funding—ample opportunity for ownership and career acceleration. - **Hybrid Work Policy**: Knox maintains a hybrid workspace model with offices in Austin, TX, and allows remote work for certain roles. - **Engineering Culture**: ~28% of staff are in technical roles (Engineering, DevOps, Security). Leadership includes a CTO (Chris Johnson) and CISO (Hemant Baidwan). Stack leverages AWS/Azure/GCP, Kubernetes, CI/CD (GitHub Actions, Jenkins, ArgoCD), and infrastructure-as-code. - **Recent Open Roles** (as of mid-2026): Senior Full-Stack Engineer, Senior Backend Engineer, DevOps Security Engineer, Director of Channels, Jr. IT Administrator. ## Sources 1. [knoxsystems.com](https://knoxsystems.com/) 2. [knoxsystems.com/platform](https://knoxsystems.com/platform) 3. [LinkedIn – Knox Systems, Inc.](https://www.linkedin.com/company/knox-systems-inc) 4. [Built In – Knox Systems, Inc.](https://builtin.com/company/knox-systems-inc) 5. [Ashby – Knox Systems Jobs](https://jobs.ashbyhq.com/knox-systems) ## Other roles at Knox Systems - [QA Engineer](https://feeny.ai/job/qa-engineer-knox-systems-united-states-arlington-va-b9k3xk7g1tjb) — United States / Arlington, VA - [Cloud Administrator](https://feeny.ai/job/cloud-administrator-knox-systems-united-states-arlington-va-s4bq471t0zhb) — United States / Arlington, VA - [Compliance Analyst - Cloud Security](https://feeny.ai/job/compliance-analyst-cloud-security-knox-systems-united-states-arlington-va-vhqrx1arayx2) — United States / Arlington, VA - [Senior Accountant](https://feeny.ai/job/senior-accountant-knox-systems-new-york-aah0hczgkyqq) — New York, NY - [Technical Implementation Manager (Fed Ramp)](https://feeny.ai/job/technical-implementation-manager-fed-ramp-knox-systems-united-states-arlington-s8etap3zs8g6) — United States / Arlington, VA - [Technical Account Manager II (Fed Ramp)](https://feeny.ai/job/technical-account-manager-ii-fed-ramp-knox-systems-united-states-arlington-va-4hgvq1qyvmmh) — United States / Arlington, VA - [Technical Account Manager I (Fed Ramp)](https://feeny.ai/job/technical-account-manager-i-fed-ramp-knox-systems-united-states-arlington-va-2sp3tt8x2ng4) — United States / Arlington, VA - [Sec Dev Ops Engineer - Level 3](https://feeny.ai/job/sec-dev-ops-engineer-level-3-knox-systems-united-states-arlington-va-gsmkpa0g1fhy) — United States / Arlington, VA - [Program Manager, Business Analyst](https://feeny.ai/job/program-manager-business-analyst-knox-systems-united-states-arlington-va-rrtbfwcrwsn6) — United States / Arlington, VA - [Director, Growth Marketing](https://feeny.ai/job/director-growth-marketing-knox-systems-new-york-87hsnk68x3q6) — New York, NY