{"id":2883259,"url":"https://alion.io/job/sprezzatura-security-automation-cyber-security-engineer","title":"Security Automation / Cyber Security Engineer","company":{"id":3908096,"name":"Sprezzatura","domain":"sprezzmc.com","url":"https://alion.io/company/sprezzatura-2","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"ADP","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":135000,"max":160000,"currency":"USD","period":"year","gross":null,"usd_annual":160000},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"JavaScript","optional":false},{"name":"Python","optional":false},{"name":"SBOM","optional":false},{"name":"AWS","optional":true},{"name":"GitHub Actions","optional":true}],"status":"closed","first_seen_at":"2026-10-19T19:57:00Z","employer_posted_date":"2026-10-19","last_verified_at":"2026-10-22T19:36:01Z","board_verified":false,"closed_at":"2026-10-22T19:36:01Z","days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Position Title: Security Automation / Cyber Security Engineer\nLocation: Remote (In the U.S)\nOther Considerations: U.S. Citizen or Permanent Resident (Required)\nPosition is contingent on contract award \nPOSITION SUMMARY \nSprezzatura is seeking a Security Automation / Cyber Security Engineer to support cybersecurity modernization for the Department of Veterans Affairs (VA) VA.gov Platform.\nThe Security Automation / Data Engineer will design, develop, and implement automation that improves how security compliance data is collected, assessed, measured, and reported across a large-scale digital platform. This role will help transform repeatable, manual security and compliance activities into sustainable, engineering-driven capabilities that provide greater visibility into security posture and reduce the operational burden associated with maintaining compliance.\nWorking alongside security, DevSecOps, infrastructure, and product engineering teams, this position will focus on automated evidence collection and controls assessment, security data integration, compliance measurement, vulnerability and remediation reporting, Software Bill of Materials (SBOM) capabilities, and security posture dashboards.\nThe ideal candidate combines cybersecurity knowledge with strong automation and data engineering skills and is comfortable integrating information across cloud infrastructure, CI/CD pipelines, security tools, APIs, and compliance systems.\nRESPONSIBILITIES\nDesign, develop, and maintain automated processes for collecting security and compliance evidence from authoritative system, infrastructure, configuration, and security data sources\nDevelop automation to support security control assessment and continuous monitoring, including OSCAL-based evidence collection and control-assessment capabilities\nBuild integrations and data pipelines that aggregate and normalize security information from multiple tools, platforms, and APIs\nDevelop security metrics and dashboards that provide near-real-time visibility into control posture, remediation status, vulnerabilities, and other security indicators\nAutomate recurring security and compliance reporting for security teams, engineering teams, program leadership, and government stakeholders\nDevelop capabilities for measuring security-control and security-tooling coverage across applications, infrastructure, and CI/CD pipelines\nAutomate vulnerability and remediation reporting to support prioritization, ownership, aging analysis, and tracking through closure\nSupport implementation and operation of an SBOM capability, including collection and analysis of software dependency and third-party component data\nIntegrate SBOM and software supply-chain information with vulnerability management and security reporting capabilities\nPartner with DevSecOps Engineers to ensure security controls implemented within CI/CD pipelines and infrastructure generate usable, repeatable compliance evidence\nIdentify manual security and compliance processes that are candidates for automation and implement scalable solutions where feasible\nSupport the development of repeatable processes that enable product and engineering teams to demonstrate continued compliance with defined security standards\nEnsure automated security evidence, metrics, and reporting are traceable, maintainable, and usable during ongoing compliance activities and independent controls assessments\nDocument automation, integrations, data sources, processes, and technical solutions to support long-term sustainment by the Platform Security team\nCollaborate with security engineers, cybersecurity/RMF specialists, DevSecOps engineers, software engineers, product teams, and government stakeholders \nQUALIFICATIONS \nAssociate's degree and four (4) years of relevant experience, or Bachelor's degree and two (2) years of relevant experience.\nFive (5) years of experience as a Cyber Security Engineer may be substituted in lieu of a degree\nExperience developing automation using Python, JavaScript, or another scripting/programming language\nExperience integrating data from APIs, cloud platforms, CI/CD systems, security tools, or other technical systems\nExperience designing or developing automated workflows, data pipelines, dashboards, metrics, or reporting solutions\nWorking knowledge of cybersecurity concepts including security controls, vulnerability management, continuous monitoring, and compliance\nExperience working with modern software development and CI/CD practices\nAbility to analyze security and technical data and translate it into meaningful metrics and actionable information\nStrong written and verbal communication skills and the ability to collaborate across security, engineering, product, and program teams\nAbility to obtain and maintain the background investigation and access required to support Department of Veterans Affairs systems \nPREFERRED QUALIFICATIONS\nExperience supporting federal cybersecurity programs or systems operating under the NIST Risk Management Framework (RMF)\nKnowledge of NIST SP 800-53 Rev. 5 security controls\nExperience with OSCAL or other machine-readable approaches to security compliance and control assessment\nExperience automating security evidence collection, continuous monitoring, or compliance assessment\nExperience with AWS security and configuration data, including services such as AWS Security Hub, GuardDuty, or similar cloud-native security tooling\nExperience integrating security capabilities into or extracting security data from GitHub Actions or other CI/CD platforms\nExperience with SAST, DAST, Software Composition Analysis (SCA), secrets detection, container scanning, or other application security tooling\nExperience implementing or working with Software Bill of Materials (SBOM) standards and tooling\nExperience with software supply-chain security and dependency or third-party component risk analysis\nExperience developing security posture, vulnerability management, or compliance dashboards\nFamiliarity with federal ATO processes, POA&Ms, control implementation evidence, and independent controls assessments\nExperience working within large-scale cloud platforms or environments supporting multiple independent product and engineering teams \nABOUT THE WORK\nThe VA.gov Platform supports a large ecosystem of systems, components, and product teams operating within a shared ATO boundary. This effort is focused on improving the Platform's security posture while establishing sustainable approaches for maintaining and demonstrating compliance over time. This SOW specifically calls for moving toward a modern, engineering-first cybersecurity model and implementing automated solutions where appropriate so that security improvements are durable and scalable rather than one-time fixes.\nThis role will be a key contributor to that effort by building the automation and data capabilities that allow security requirements, implementation evidence, vulnerabilities, remediation progress, and overall security posture to be measured and understood continuously rather than assembled manually in preparation for an assessment or ATO renewal. That directly supports the SOW's goal of establishing processes that allow the steady-state Platform Security team to maintain compliance iteratively.\nWORKING CONDITIONS\nStandard Business hours are Monday through Friday. Occasional extended or weekend hours may be required based on operational needs. Must have reliable internet service that allows for effective telecommuting. Travel may be required from time to time for customer meetings and industry events.\nPAY RANGE\nThe base salary range for this position is $135,000 to $160,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices and represent a good-faith estimate of the compensation for this position at the time of posting.\nBENEFITS\nSprezzatura offers a comprehensive and flexible benefit package to include:\nMedical, Dental, and Vision\nHealth Saving Account (when enrolled in eligible plan) with Company contribution \nCompany paid Life, Accidental Death, Short-term & Long-term Disability\nVoluntary Accident, Hospital Indemnity, & Critical Care Insurance\nVoluntary Medical & Dependent Care Flexible Spending Accounts\nAccrued Paid Time Off & Company Paid Holidays\n401(k) Retirement Plan with Company match \nWORK AUTHORIZATION\nSprezzatura participates in E-Verify and will provide the federal government with your I-9 information to confirm that you are authorized to work in the U.S.\nSprezzatura is a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that thrives at the intersection of technology, innovation, and impact. We specialize in secure, scalable, and human-centered digital solutions that accelerate government transformation. Our work spans DevSecOps, health IT modernization, intelligent automation, benefits delivery, and digital communications. We partner with agencies ready to evolve-delivering not just strategy, but measurable execution. Rooted in operational excellence and driven by curiosity, we help our clients navigate complexity with clarity-turning ambitious ideas into real-world outcomes. No buzzwords. Just impact.\nEEO STATEMENT\nSprezzatura is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other legally protected characteristic. Applicants have the right to discuss, disclose, or inquire about compensation without retaliation. Reasonable accommodations are available for qualified individuals with disabilities.\nThis job description is not intended to be an employment contract and does not guarantee employment for any specific duration.","description_format":"text","description_chars":9977,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"associate","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","DevOps & Platform Engineering","Information Security","DevSecOps"],"lifecycle":[{"event":"open","at":"2026-10-19T23:26:21Z"},{"event":"close","at":"2026-10-22T19:36:01Z"}],"visa":[],"liveness":null,"pay":{"stated_usd_annual":160000,"is_top_pay":true},"html_url":"https://alion.io/job/sprezzatura-security-automation-cyber-security-engineer","json_url":"https://alion.io/job/sprezzatura-security-automation-cyber-security-engineer.json","meta":{"generated_at":"2026-10-23T23:33:51Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":7023,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-24T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3908096},"rest":"https://alion.io/mcp/rest/get_company?id=3908096"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsprezzatura-security-automation-cyber-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsprezzatura-security-automation-cyber-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsprezzatura-security-automation-cyber-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sprezzatura-security-automation-cyber-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsprezzatura-security-automation-cyber-security-engineer"}]}