Security Automation / Cyber Security Engineer
New
S
SprezzaturaCybersecurity
Remote (In the U.S)Full-TimeMiddle
Salary135,000 - 160,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- Associate's degree and four (4) years of relevant experience, or Bachelor's degree and two (2) years of relevant experience. Five (5) years of experience as a Cyber Security Engineer may be substituted in lieu of a degree.
- Required Skills
- PythonCybersecurityJavascriptCI/CDRESTful APIs
Requirements
- Associate's degree and four years of relevant experience, or bachelor's degree and two years of relevant experience.
- Five years of experience as a Cyber Security Engineer may substitute for a degree.
- Experience developing automation using Python, JavaScript, or another scripting or programming language.
- Experience integrating data from APIs, cloud platforms, CI/CD systems, security tools, or other technical systems.
- Experience designing or developing automated workflows, data pipelines, dashboards, metrics, or reporting solutions.
- Working knowledge of security controls, vulnerability management, continuous monitoring, and compliance.
- Experience with modern software development and CI/CD practices.
- Ability to analyze security and technical data and translate it into meaningful metrics and actionable information.
- Ability to obtain and maintain the background investigation and access required to support Department of Veterans Affairs systems.
- Must be a U.S. Citizen or Permanent Resident.
- Preferred experience supporting federal cybersecurity programs or systems under the NIST Risk Management Framework.
- Preferred knowledge of NIST SP 800-53 Rev. 5, OSCAL, AWS security tooling, SBOM, software supply-chain security, and federal ATO processes.
Responsibilities
- Design and maintain automated processes for collecting security and compliance evidence from system, infrastructure, configuration, and security data sources.
- Develop automation for security control assessment and continuous monitoring, including OSCAL-based capabilities.
- Build integrations and data pipelines to aggregate and normalize information from tools, platforms, and APIs.
- Develop metrics and dashboards for control posture, remediation status, vulnerabilities, and other security indicators.
- Automate recurring security and compliance reporting for security teams, engineering teams, program leadership, and government stakeholders.
- Automate vulnerability and remediation reporting, including prioritization, ownership, aging analysis, and tracking through closure.
- Support an SBOM capability and integrate software supply-chain information with vulnerability management and security reporting.
- Partner with DevSecOps Engineers to generate repeatable compliance evidence from CI/CD pipelines and infrastructure.
- Document automation, integrations, data sources, processes, and technical solutions for sustainment by the Platform Security team.
View Full Description & ApplyYou'll be redirected to the employer's site
