Senior Cyber Security Engineer

Sprezzatura Management Consulting; United States; Remote; USD 130,000 - 190,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Health Savings Account

Life and Disability Insurance

Paid Time Off & Holidays

401(k) Company match

Job summary

Sprezzatura is seeking a Senior Cyber Security Engineer to provide hands-on security leadership, drive automation and AI enhancements, and strengthen delivery across programs.

The role requires deep RMF, NIST, and federal security experience, with responsibilities spanning guidance, roadmap development, automation, and collaboration with COEs, program leadership, and client stakeholders.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or related field (Master’s preferred).

Responsibilities

• Provide senior-level technical and delivery guidance across cybersecurity teams and workstreams.
• Maintain awareness of security delivery activities, risks, dependencies, and evolving client expectations.
• Support RMF implementation, A&A activities, security control reviews, artifact preparation, POA&M management, system authorization, configuration management, and related security activities.
• Identify gaps across security practices and develop strategies to improve quality, consistency, efficiency, and audit readiness.
• Work with security leads and individual contributors to strengthen execution and establish consistent delivery standards.
• Mentor security practitioners and team leads while promoting accountability, continuous improvement, and knowledge sharing.
• Identify repetitive, manual, error-prone, or high-friction security processes that can be improved through automation, AI, or workflow redesign.
• Develop and maintain a prioritized roadmap and backlog of cybersecurity automation opportunities.
• Lead development of reusable AI prompts, automation templates, workflow accelerators, and standardized approaches for recurring security activities.
• Apply automation and AI to RMF and A&A workflows, control reviews, artifact validation, POA&M management, documentation, compliance tracking, and reporting.
• Develop prompt engineering guidance, usage documentation, and targeted training for responsible AI adoption across cybersecurity teams.
• Partner with technical resources and stakeholders to move automation opportunities from concept through implementation.
• Drive continuous improvement in the accuracy, completeness, consistency, and audit readiness of cybersecurity deliverables.
• Collaborate across security teams, COEs, program leadership, architecture, platform operations, sustainment, reporting, and other stakeholders to align security and automation efforts with broader program priorities.
• Track and communicate progress, risks, dependencies, adoption, and measurable improvements from cybersecurity automation initiatives.

Skills

Cybersecurity leadership

RMF experience

NIST standards

Automation / AI

Communication

Education

Bachelor’s degree in Computer Science or related

Master’s degree preferred

Job description

Senior Cyber Security Engineer

Professional Remote, US

2 days ago Requisition ID: 1245

Salary Range: $130,000.00 To $190,000.00 Annually

Position Title: Senior Cyber Security Engineer
Location: Remote (In the U.S)

Other Considerations: U.S. Citizen or Permanent Resident (Required)

POSITION SUMMARY

The Senior Cyber Security Engineer is a senior, hands-on cybersecurity leader responsible for strengthening security delivery while identifying and implementing opportunities to improve how security work is performed through automation and AI.

This role requires deep experience with federal cybersecurity requirements, including the Risk Management Framework (RMF), NIST standards, FIPS 199, Authorization and Assessment (A&A), security controls, POA&M management, and system authorization activities.

The role will work across cybersecurity teams, program leadership, Centers of Excellence (COEs), and other delivery functions to improve consistency, reduce manual effort, strengthen compliance, and introduce practical AI and automation capabilities that improve the quality and predictability of cybersecurity delivery.

RESPONSIBILITIES

• Provide senior-level technical and delivery guidance across cybersecurity teams and workstreams
• Maintain awareness of security delivery activities, risks, dependencies, and evolving client expectations
• Support RMF implementation, A&A activities, security control reviews, artifact preparation, POA&M management, system authorization, configuration management, and related security activities
• Identify gaps across security practices and develop strategies to improve quality, consistency, efficiency, and audit readiness
• Work with security leads and individual contributors to strengthen execution and establish consistent delivery standards
• Mentor security practitioners and team leads while promoting accountability, continuous improvement, and knowledge sharing
• Identify repetitive, manual, error-prone, or high-friction security processes that can be improved through automation, AI, or workflow redesign
• Develop and maintain a prioritized roadmap and backlog of cybersecurity automation opportunities
• Lead development of reusable AI prompts, automation templates, workflow accelerators, and standardized approaches for recurring security activities
• Apply automation and AI to areas such as RMF and A&A workflows, control reviews, artifact validation, POA&M management, documentation, compliance tracking, reporting, data reconciliation, and quality assurance
• Develop prompt engineering guidance, usage documentation, and targeted training to support responsible AI adoption across cybersecurity teams
• Partner with technical resources and stakeholders to move automation opportunities from concept through implementation
• Drive continuous improvement in the accuracy, completeness, consistency, and audit readiness of cybersecurity deliverables
• Collaborate across security teams, COEs, program leadership, architecture, platform operations, sustainment, reporting, and other stakeholders to align security and automation efforts with broader program priorities
• Track and communicate progress, risks, dependencies, adoption, and measurable improvements resulting from cybersecurity automation and process improvement initiatives

QUALIFICATIONS

• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field. (Master’s preferred)
• CISSP or comparable industry-recognized cybersecurity credential
• 10+ years of experience working with or leading diverse technical or cybersecurity teams, including subcontractor resources
• 5+ years of federal information systems security experience
• 5+ years of hands-on Risk Management Framework (RMF) experience
• In-depth knowledge of NIST standards, FIPS 199, and federal information system security requirements
• Demonstrated experience with A&A activities, security control reviews, POA&M management, system authorizations, configuration management, and security documentation
• Familiarity with multiple cybersecurity compliance frameworks
• Demonstrated experience identifying and improving inefficient or manual cybersecurity processes
• Experience applying automation to cybersecurity, compliance, technical, or operational workflows
• Practical experience using AI-enabled tools, prompt engineering, or AI-assisted workflows to improve productivity, consistency, or quality
• Strong communication and leadership skills with the ability to work across technical teams, program leadership, and client stakeholders

WORKING CONDITIONS

Standard Business hours are Monday through Friday. Occasional extended or weekend hours may be required based on operational needs. Must have reliable internet service that allows for effective telecommuting.

PAY RANGE

The base salary range for this position is $130,000 to $190,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices and represent a good-faith estimate of the compensation for this position at the time of posting.

BENEFITS

Sprezzatura offers a comprehensive and flexible benefit package to include:

• Medical, Dental, and Vision
• Health Saving Account (when enrolled in eligible plan) with Company contribution
• Company paid Life, Accidental Death, Short-term & Long-term Disability
• Voluntary Accident, Hospital Indemnity, & Critical Care Insurance
• Voluntary Medical & Dependent Care Flexible Spending Accounts
• Accrued Paid Time Off & Company Paid Holidays
• 401(k) Retirement Plan with Company match
  

WORK AUTHORIZATION

Sprezzatura participates in E-Verify and will provide the federal government with your I-9 information to confirm that you are authorized to work in the U.S.

Sprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that thrives at the intersection of technology, innovation, and impact. We specialize in secure, scalable, and human-centered digital solutions that accelerate government transformation. Our work spans DevSecOps, health IT modernization, intelligent automation, benefits delivery, and digital communications. We partner with agencies ready to evolve—delivering not just strategy, but measurable execution. Rooted in operational excellence and driven by curiosity, we help our clients navigate complexity with clarity—turning ambitious ideas into real-world outcomes. No buzzwords. Just impact.

EEO STATEMENT

Sprezzatura is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other legally protected characteristic. Applicants have the right to discuss, disclose, or inquire about compensation without retaliation. Reasonable accommodations are available for qualified individuals with disabilities.

This job description is not intended to be an employment contract and does not guarantee employment for any specific duration.