Remote Security Automation Engineer for Cloud & Compliance

Sprezzatura Management Consulting; United States; Remote; USD 135,000 - 160,000; Full time

Benefits offered by this job

Medical, Dental, and Vision

Health Saving Account with Company con

Company paid Life and Disability

Voluntary Accident, Hospital Indemnity

401(k) Retirement Plan with Company 1

Job summary

Sprezzatura is seeking a Security Automation / Cyber Security Engineer to support cybersecurity modernization for the VA.gov Platform. The role focuses on designing and implementing automated evidence collection, control assessment, data pipelines, SBOM capabilities, and dashboards to improve security posture across a large digital platform.

Work with DevSecOps, infrastructure, and product teams to integrate automation across cloud, CI/CD, and compliance systems, delivering measurable

Qualifications

• Associate's degree and 4 years of relevant experience, or Bachelor's degree and 2 years of relevant experience.
• Five years of experience as a Cyber Security Engineer may be substituted in lieu of a degree.
• Experience developing automation using Python, JavaScript, or another scripting/programming language.
• Experience integrating data from APIs, cloud platforms, CI/CD systems, security tools, or other technical systems.
• Experience designing or developing automated workflows, data pipelines, dashboards, metrics, or reporting solutions.
• Working knowledge of cybersecurity concepts including security controls, vulnerability management, continuous monitoring, and compliance.
• Experience working with modern software development and CI/CD practices.
• Ability to analyze security and technical data and translate it into meaningful metrics and actionable information.

Responsibilities

• Design, develop, and maintain automated processes for collecting security and compliance evidence from authoritative system, infrastructure, configuration, and security data sources.
• Develop automation to support security control assessment and continuous monitoring, including OSCAL-based evidence collection and control-assessment capabilities.
• Build integrations and data pipelines that aggregate and normalize security information from multiple tools, platforms, and APIs.
• Develop security metrics and dashboards that provide near-real-time visibility into control posture, remediation status, vulnerabilities, and other security indicators.
• Automate recurring security and compliance reporting for security teams, engineering teams, program leadership, and government stakeholders.
• Develop capabilities for measuring security-control and security-tooling coverage across applications, infrastructure, and CI/CD pipelines.
• Automate vulnerability and remediation reporting to support prioritization, ownership, aging analysis, and tracking through closure.
• Support implementation and operation of an SBOM capability, including collection and analysis of software dependency and third-party component data.
• Integrate SBOM and software supply-chain information with vulnerability management and security reporting capabilities.
• Partner with DevSecOps Engineers to ensure security controls implemented within CI/CD pipelines and infrastructure generate usable, repeatable compliance evidence.
• Identify manual security and compliance processes that are candidates for automation and implement scalable solutions where feasible.
• Support the development of repeatable processes that enable product and engineering teams to demonstrate continued compliance with defined security standards.
• Ensure automated security evidence, metrics, and reporting are traceable, maintainable, and usable during ongoing compliance activities and independent controls assessments.
• Document automation, integrations, data sources, processes, and technical solutions to support long-term sustainment by the Platform Security team.
• Collaborate with security engineers, cybersecurity/RMF specialists, DevSecOps engineers, software engineers, product teams, and government stakeholders

Skills

Python

JavaScript

APIs

CI/CD

Security metrics

Data engineering

Education

Associate degree

Bachelor's degree

Five years experience in lieu of degree

Tools

OSCAL

AWS Security Hub

GuardDuty

GitHub Actions

SBOM tooling

SAST/DAST/SCA

Job description

Sprezzatura is seeking a Security Automation / Cyber Security Engineer to support cybersecurity modernization for the VA.gov Platform. The role focuses on designing and implementing automated evidence collection, control assessment, data pipelines, SBOM capabilities, and dashboards to improve security posture across a large digital platform.

Work with DevSecOps, infrastructure, and product teams to integrate automation across cloud, CI/CD, and compliance systems, delivering measurable