Remote Senior DevSecOps Engineer & Security Automation Lead

Sprezzatura; United States; A distancia; USD 150.000 - 170.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Medical, Dental, and Vision

401(k) with company match

Life and disability insurance

Paid time off

Descripción de la vacante

Sprezzatura is seeking a Senior DevSecOps/Security Compliance Engineer to lead security engineering efforts for federal cybersecurity modernization. You will drive remediation across cloud infra, CI/CD pipelines, and platform services, translating control gaps into durable technical solutions and working with RMF and security teams.

This role requires deep cloud and DevSecOps expertise, strong knowledge of NIST RMF controls, and the ability to operate as a hands-on engineer and SME in a

Formación

• Bachelor's degree and 10+ years of relevant experience.
• Hands-on DevSecOps in cloud, platform or security engineering.
• Advanced AWS experience in complex production environments.
• Strong CI/CD design and GitHub Actions.
• Experience implementing security controls via IaC and automation.
• Experience with vulnerability identification and remediation.
• Experience with SAST, DAST, SCA, secrets detection, container scanning.
• Experience with IaC and configuration management technologies.
• Strong knowledge of cloud security, IAM, logging, monitoring and secure configuration practices.
• Experience with containers and cloud-native architectures.
• Proficiency in scripting languages for automation.
• Ability to communicate risks and remediation to multiple stakeholders.
• Ability to obtain and maintain required background checks and 24/7 on-call.

Responsabilidades

• Serve as senior technical security engineering lead and SME.
• Lead hands-on remediation of vulnerabilities and security debt.
• Translate requirements, findings and POA&Ms into engineering solutions.
• Implement remediation through code, infrastructure, and policies.
• Design and maintain automated security gates in GitHub Actions/CI/CD.
• Integrate SAST/DAST/SCA and secrets detection capabilities.
• Develop secure configuration baselines for cloud infrastructure and Platform components.
• Implement centralized secrets management and secure credential handling.
• Lead vulnerability remediation across AWS, containers, apps, and pipelines.
• Provision secure CI/CD runner infrastructure in VA cloud environments.
• Automate patching, remediation, and security configuration management.
• Improve logging, monitoring, and alerting to support threat detection.
• Integrate platform systems with security telemetry and CSOC requirements.
• Configure AWS GuardDuty, Security Hub CSPM and related services.
• Lead or support DAST/WASA, SAST, secrets detection and runtime security.
• Coordinate with RMF to determine appropriate remediation for NIST controls.
• Provide guidance to product/engineering teams on security requirements.
• Document controls and operational procedures to sustain improvements.
• Participate in reviews, incident response, and 24/7 on-call rotation.

Conocimientos

DevSecOps

Cloud infrastructure

AWS

CI/CD pipelines

Security tooling

SAST/DAST

Secrets management

Kubernetes

Educación

Bachelor's degree

10+ years experience

Herramientas

GitHub Actions

AWS

Kubernetes

IAM

Descripción del empleo

Sprezzatura is seeking a Senior DevSecOps/Security Compliance Engineer to lead security engineering efforts for federal cybersecurity modernization. You will drive remediation across cloud infra, CI/CD pipelines, and platform services, translating control gaps into durable technical solutions and working with RMF and security teams.

This role requires deep cloud and DevSecOps expertise, strong knowledge of NIST RMF controls, and the ability to operate as a hands-on engineer and SME in a