Remote opportunity at
SprezzMCSecurity Automation / Cyber Security Engineer
Sprezzatura seeks a full-time Security Automation / Cyber Security Engineer to support cybersecurity modernization efforts for the Department of Veterans Affairs VA.gov Platform. This remote position…
Career Tools
About This Role
Sprezzatura seeks a full-time Security Automation / Cyber Security Engineer to support cybersecurity modernization efforts for the Department of Veterans Affairs VA.gov Platform. This remote position offers a base salary between USD 135,000 and 160,000 per year and requires candidates to be U.S. citizens or permanent residents who can obtain and maintain required background investigations and system access. The person in this role will design and build automation that streamlines…
Job Description
Sprezzatura seeks a full-time Security Automation / Cyber Security Engineer to support cybersecurity modernization efforts for the Department of Veterans Affairs VA.gov Platform. This remote position offers a base salary between USD 135,000 and 160,000 per year and requires candidates to be U.S. citizens or permanent residents who can obtain and maintain required background investigations and system access.
The person in this role will design and build automation that streamlines how compliance data is collected, measured, and reported across a large digital platform. Responsibilities include building data pipelines, automating evidence collection for continuous monitoring, developing security metrics dashboards, and implementing Software Bill of Materials capabilities. The work replaces manual security tasks with sustainable, engineering-driven processes alongside security, infrastructure, product, and DevSecOps teams.
Sprezzatura is a service-disabled veteran-owned small business specializing in secure digital solutions, health IT modernization, intelligent automation, and human-centered technology for government agencies.
Responsibilities
- Design and maintain automated workflows for gathering security and compliance evidence from various system and infrastructure sources
- Develop automation for continuous monitoring and security control assessments, including OSCAL-based methods
- Build data integrations and pipelines to normalize security information across multiple platforms and APIs
- Create security metrics dashboards that deliver near-real-time visibility into control posture and vulnerabilities
- Automate recurring security and compliance reporting for internal teams and government stakeholders
- Track and automate vulnerability and remediation reporting through closure
- Implement and operate Software Bill of Materials capabilities for software dependency analysis
- Collaborate with DevSecOps engineers to ensure CI/CD pipelines generate repeatable compliance evidence
- Identify and automate manual security processes to scale compliance efforts
- Document technical solutions, integrations, and data sources for long-term platform security maintenance
Requirements
- U.S. citizen or permanent resident
- Ability to obtain and maintain necessary background investigation and system access for Department of Veterans Affairs systems
- Experience developing automation with Python, JavaScript, or another programming language
- Experience integrating data from APIs, cloud platforms, CI/CD systems, or security tools
- Experience designing automated workflows, data pipelines, dashboards, or reporting solutions
- Working knowledge of security controls, vulnerability management, continuous monitoring, and compliance
- Familiarity with modern software development and CI/CD practices
- Ability to analyze technical security data and communicate effectively across teams
- Reliable internet service for telecommuting
Qualifications
- Associate's degree with four years of relevant experience, Bachelor's degree with two years of experience, or five years of experience as a Cyber Security Engineer
- Experience supporting federal cybersecurity programs operating under the NIST Risk Management Framework
- Knowledge of NIST SP 800-53 Rev. 5 security controls
- Experience with OSCAL or machine-readable compliance assessment
- Familiarity with AWS security tooling like Security Hub and GuardDuty
- Experience integrating security into GitHub Actions or other CI/CD platforms
- Experience with SAST, DAST, Software Composition Analysis, or container scanning
- Familiarity with federal ATO processes and Plan of Action and Milestones
Core Skills
Benefits
- Medical, dental, and vision insurance
- Health Savings Account with company contribution
- Company-paid life, accidental death, short-term, and long-term disability insurance
- Voluntary accident, hospital indemnity, and critical care insurance
- Voluntary flexible spending accounts for medical and dependent care
- Accrued paid time off and company-paid holidays
- 401(k) retirement plan with company match
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes, the posting specifies that the role is remote within the United States and requires reliable internet service for telecommuting.
What is the salary range for this role?
The base salary range is USD 135,000 to 160,000 annually, depending on experience, education, geographic location, and other factors.
What are the citizenship or residency requirements?
Candidates must be U.S. citizens or permanent residents and able to obtain and maintain the background investigation and access required for Department of Veterans Affairs systems.
What education or experience is required?
Candidates need either an Associate's degree with four years of relevant experience, a Bachelor's degree with two years of relevant experience, or five years of experience as a Cyber Security Engineer.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.