Security Automation Engineer

SkyePoint Decisions; United States; Remote; USD 130,000 - 185,000; Full time

Benefits offered by this job

Certification incentive program

PTO

Floating federal holiday options

Health insurance options

401k matched

Job summary

SkyePoint Decisions is a federal contractor offering a remote Security Automation Engineer role to support a government client. You will design automated security controls within a DevSecOps pipeline to ensure continuous secure software delivery.

Responsibilities include SAST/DAST/IAST, SBOM and secrets scanning, automated findings routing, and security gates aligned with NIST SP 800-218 and CIS benchmarks, collaborating with developers to improve secure coding and release readiness.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, or related field.
• 8+ years experience in application security, DevSecOps, or compliance automation.
• Experience scripting or integrating security checks and remediation workflows.
• Working knowledge of secure SDLC and cloud/security control frameworks.
• U.S. Citizenship required; ability to obtain a 6c Public Trust; active Secret preferred.

Responsibilities

• Integrate and operate SAST, DAST, IAST, software composition analysis, SBOM, secrets/dependency scanning, and IaC security review capabilities.
• Automate collection, normalization, correlation, and routing of security findings into approved workflows and repositories.
• Develop security gates, policy checks, dashboards, notifications, and exception-handling workflows within customer-approved platforms.
• Support continuous penetration-testing activities and incorporate results into development and remediation workflows.
• Implement security automation aligned with NIST SP 800-218, OMB/CISA guidance, STIGs, CIS benchmarks, and customer standards.
• Collaborate with developers and platform engineers to remediate findings and improve secure coding and release readiness.
• Maintain security automation code, configurations, procedures, evidence, and technical documentation.

Skills

SAST

DAST

IAST

SBOM

Secrets scanning

IaC security

Cloud security

Education

Bachelors in Cybersecurity

Tools

GitLab security

AWS security services

Python scripting

Job description

SkyePoint Decisions is a leading Cybersecurity Architecture and Engineering, Critical Infrastructure and Operations, and Applications Development and Maintenance IT service provider headquartered in Dulles, Virginia with operations across the U.S. We provide innovative enterprise-wide solutions as well as targeted services addressing the complex challenges faced by our federal government clients. Our focus is on enabling our clients to deliver their mission most efficiently and effectively – anytime, anywhere, securely. We combine technical expertise, mission awareness, and an empowered workforce to produce meaningful results.

This is a contingent position based upon contract win.

SkyePoint Decisions is seeking a Security Automation Engineer to join our team supporting a federal customer. This position is contingent on contract win.

This is a remote position.

This person will e ngineer automated security controls, scans, evidence, and compliance checks within customer's DevSecOps environment so security is continuously integrated into software development and delivery.

Responsibilities:

• Integrate and operate SAST, DAST, IAST, software composition analysis, SBOM, secrets/dependency scanning, and infrastructure-as-code security review capabilities.
• Automate collection, normalization, correlation, and routing of security findings and evidence into approved workflows and repositories.
• Develop security gates, policy checks, dashboards, notifications, and exception-handling workflows within customer-approved platforms.
• Support continuous penetration-testing activities and incorporation of results into development and remediation workflows.
• Implement security automation aligned with NIST SP 800-218, applicable OMB/CISA guidance, STIGs, CIS benchmarks, and customer standards.
• Collaborate with developers and platform engineers to remediate findings and improve secure coding, pipeline controls, and release readiness.
• Maintain security automation code, configurations, procedures, evidence, and technical documentation.

Required Qualifications:

• Bachelor’s degree in Cybersecurity, Computer Science, Software Engineering, Information Systems, Engineering, or related field with 8+ years of experience.
• Hands-on experience with application security, DevSecOps security tooling, security scanning, vulnerability management, or compliance automation.
• Experience scripting or developing integrations to automate security checks, evidence collection, reporting, and remediation workflows.
• Working knowledge of secure software development and cloud/security control frameworks.
• Ability to obtain a 6c Public Trust. At least an active Secret clearance is highly preferred.
• U.S. Citizenship is required.

Preferred Qualifications:

• SCA/SBOM generation and analysis
• NIST SP 800-218 / SSDF
• AWS security services
• Python or comparable scripting
• GitLab security integration

Compensation:

Salary Range: TBD

The SkyePoint Decisions salary range for this position is a general guideline only. It represents an estimated range for this position and is just one piece of our total compensation package.

Salary at SkyePoint is determined by various factors, including but not limited to location, work schedule, the candidate’s combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability, market data and business considerations.

In addition to a competitive salary, SkyePoint offers benefits including a certification incentive program, PTO, floating federal holiday options, several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, Vision, ST/LT Disability, Life Insurance, and 401k matched.

What We Can Offer You:

• At SkyePoint, we go B.I.G. (beginning in GRATITUDE) by recognizing all we have and giving back to our employees, families, and communities. It instills a positive mindset that permeates all we do. By beginning in gratitude, SkyePoint can continue to spread living in gratitude each day.
• Great Benefits: Several insurance options including HMO and High Deductible plans with Health Savings Accounts [HSAs], Flex Spending Accounts [FSAs], Full Dental Plans, ST/LT Disability, Life Insurance, floating federal holiday options, and 401k matched
• Certificate Incentive Program: To promote professional development, we recognize and reward employees who obtain new certifications aligned with business needs.

SkyePoint Decisions is an established ISO 9001:2015 and ISO/IEC 27001:2013 certified small business and appraised at CMMI Level 3 for Services and Development. We possess a common vision of excellence and foster a collaborative team culture built upon individual performance and accountability. We invest in our people and systems to create value for our clients. It is the SkyePoint Way. We are grateful for the opportunity to work with exceptional people and give back to the communities we serve. Our employees value the flexibility at SkyePoint that allows them to balance quality work and their personal lives.

SkyePoint Decisions is a participating E-Verify Employer.

U.S. Citizenship is required for most positions.

Equal Opportunity Employer/Veterans/Disabled.

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey.Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiringprocess or thereafter. Any information that you do provide will be recorded and maintained in aconfidential file.

As set forth in SkyePoint Decisions’s Equal Employment Opportunity policy,we do not discriminate on the basis of any protected group status under any applicable law.

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection.As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measurethe effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categoriesis as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.