Security Automation / Cyber Security Engineer
New
J
JobgetherCybersecurity
Ability to work remotely from within the United StatesFull-TimeMiddle
Salary135,000 - 160,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- An associate degree and at least four years of relevant experience, or a bachelor's degree and at least two years of relevant experience. Alternatively, five years of experience as a Cyber Security Engineer may substitute for a degree.
- Required Skills
- PythonCybersecurityJavascriptCI/CDRESTful APIs
Requirements
- Have an associate degree and at least four years of relevant experience, a bachelor's degree and at least two years of relevant experience, or five years of experience as a Cyber Security Engineer in lieu of a degree.
- Have practical experience developing automation with Python, JavaScript, or another scripting or programming language.
- Have experience integrating and processing data from APIs, cloud environments, CI/CD systems, security tools, or other technical platforms.
- Have experience designing or implementing automated workflows, data pipelines, dashboards, security metrics, or reporting solutions.
- Have working knowledge of cybersecurity principles, including security controls, vulnerability management, continuous monitoring, and regulatory compliance.
- Be familiar with modern software development practices and CI/CD workflows.
- Be able to obtain and maintain the background investigation approval and system access required for Department of Veterans Affairs environments.
- Be able to work remotely from within the United States, maintain reliable internet connectivity, and work standard Monday-to-Friday business hours; occasional extended or weekend hours and limited travel may be required.
- Federal cybersecurity, NIST RMF, NIST SP 800-53 Rev. 5, ATO processes, POA&Ms, or independent security assessment experience is preferred.
- Experience with OSCAL, machine-readable compliance frameworks, automated evidence collection, or continuous monitoring is preferred.
- Familiarity with AWS Security Hub or GuardDuty, GitHub Actions or comparable CI/CD platforms, and application security testing tools is preferred.
- Experience with SBOM standards and tools, software dependency analysis, third-party component risk management, or security dashboards is preferred.
Responsibilities
- Design and maintain automated workflows for collecting security and compliance evidence from system, infrastructure, configuration, and security data sources.
- Build automated security control assessment and continuous monitoring capabilities, including machine-readable evidence collection using OSCAL.
- Develop integrations and data pipelines to aggregate and organize security information from APIs, cloud platforms, CI/CD pipelines, and security tools.
- Create security dashboards and metrics covering security posture, control coverage, vulnerabilities, remediation progress, and compliance status.
- Automate recurring security and compliance reports for engineering teams, cybersecurity professionals, program leadership, and government stakeholders.
- Automate vulnerability and remediation reporting, including prioritization, ownership assignment, aging analysis, and tracking through resolution.
- Support SBOM capabilities by collecting and analyzing software dependencies and third-party components, and integrate supply-chain information with vulnerability management.
- Collaborate with DevSecOps engineers to produce consistent, reusable, and auditable compliance evidence from CI/CD pipelines and infrastructure.
- Document automation workflows, technical integrations, data sources, and implementation procedures for long-term maintenance.
View Full Description & ApplyYou'll be redirected to the employer's site
