Security Automation, Cyber Security Engineer

🔥 0 minutes ago

🇺🇸 United States – Remote

💵 $135k - $160k / year

⏰ Full Time

🟢 Junior

🟡 Mid-level

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Sprezzatura

WebsiteLinkedInAll Job Openings

51 - 200 employees

Founded 2009

🏛️ Government

💼 Consulting

🏥 Healthcare

Government • Consulting • Healthcare

Sprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that provides secure, scalable, and human-centered digital solutions to federal agencies. It specializes in DevSecOps, health IT modernization, intelligent automation, benefits delivery and claims processing, digital communications, data analytics/business intelligence, and organizational change management. Sprezzatura focuses on end-to-end IT and professional services across the product lifecycle—helping government clients modernize systems, improve delivery through Agile and DevSecOps practices, and translate strategy into measurable execution.

📋 Description

• Design, develop, and maintain automated processes for collecting security and compliance evidence • Develop automation for security control assessment and continuous monitoring, including OSCAL-based evidence collection and control-assessment capabilities • Build integrations and data pipelines aggregating and normalizing security information from multiple tools, platforms, and APIs • Develop security metrics and dashboards for near-real-time visibility into control posture, remediation status, vulnerabilities, and other security indicators • Automate recurring security and compliance reporting for security, engineering, program leadership, and government stakeholders • Develop capabilities to measure security-control and security-tooling coverage across applications, infrastructure, and CI/CD pipelines • Automate vulnerability and remediation reporting, including prioritization, ownership, aging analysis, and closure tracking • Support implementation and operation of an SBOM capability, including collection and analysis of software dependency and third-party component data • Integrate SBOM and software supply-chain information with vulnerability management and security reporting • Partner with DevSecOps Engineers to ensure CI/CD and infrastructure security controls generate usable, repeatable compliance evidence • Identify manual security and compliance processes suitable for automation and implement scalable solutions • Support repeatable processes enabling product and engineering teams to demonstrate continued compliance with security standards • Ensure automated security evidence, metrics, and reporting are traceable, maintainable, and usable during compliance activities and independent controls assessments • Document automation, integrations, data sources, processes, and technical solutions for long-term sustainment • Collaborate with security engineers, cybersecurity/RMF specialists, DevSecOps engineers, software engineers, product teams, and government stakeholders • Support cybersecurity modernization for the Department of Veterans Affairs VA.gov Platform • Build automation and data capabilities enabling continuous measurement of security requirements, evidence, vulnerabilities, remediation progress, and overall security posture

🎯 Requirements

• U.S. Citizen or Permanent Resident required • Associate's degree and four (4) years of relevant experience, or Bachelor's degree and two (2) years of relevant experience • Five (5) years of experience as a Cyber Security Engineer may be substituted in lieu of a degree • Experience developing automation using Python, JavaScript, or another scripting/programming language • Experience integrating data from APIs, cloud platforms, CI/CD systems, security tools, or other technical systems • Experience designing or developing automated workflows, data pipelines, dashboards, metrics, or reporting solutions • Working knowledge of cybersecurity concepts including security controls, vulnerability management, continuous monitoring, and compliance • Experience working with modern software development and CI/CD practices • Ability to analyze security and technical data and translate it into meaningful metrics and actionable information • Strong written and verbal communication skills and ability to collaborate across security, engineering, product, and program teams • Ability to obtain and maintain the background investigation and access required to support Department of Veterans Affairs systems • Preferred: experience supporting federal cybersecurity programs or systems operating under the NIST Risk Management Framework (RMF) • Preferred: knowledge of NIST SP 800-53 Rev. 5 security controls • Preferred: experience with OSCAL or other machine-readable approaches to security compliance and control assessment • Preferred: experience automating security evidence collection, continuous monitoring, or compliance assessment • Preferred: experience with AWS security and configuration data, including AWS Security Hub and GuardDuty or similar tooling • Preferred: experience integrating security capabilities into or extracting security data from GitHub Actions or other CI/CD platforms • Preferred: experience with SAST, DAST, Software Composition Analysis (SCA), secrets detection, container scanning, or other application security tooling • Preferred: experience implementing or working with SBOM standards and tooling • Preferred: experience with software supply-chain security and dependency or third-party component risk analysis • Preferred: experience developing security posture, vulnerability management, or compliance dashboards • Preferred: familiarity with federal ATO processes, POA&Ms, control implementation evidence, and independent controls assessments • Preferred: experience working within large-scale cloud platforms or environments supporting multiple independent product and engineering teams • Standard business hours are Monday through Friday; occasional extended or weekend hours may be required • Must have reliable internet service that allows for effective telecommuting

🏖️ Benefits

• Medical, Dental, and Vision • Health Saving Account (when enrolled in eligible plan) with Company contribution • Company paid Life, Accidental Death, Short-term & Long-term Disability • Voluntary Accident, Hospital Indemnity, & Critical Care Insurance • Voluntary Medical & Dependent Care Flexible Spending Accounts • Accrued Paid Time Off & Company Paid Holidays • 401(k) Retirement Plan with Company match • Reliable internet service for effective telecommuting • Occasional travel for customer meetings and industry events