Security Automation / Cyber Security Engineer

Requirements

• An associate degree and at least four years of relevant experience, or a bachelor's degree and at least two years of relevant experience. Alternatively, five years of experience as a Cyber Security Engineer may substitute for a degree
• Practical experience developing automation using Python, JavaScript, or another scripting or programming language
• Experience integrating and processing data from APIs, cloud environments, CI/CD systems, security tools, or other technical platforms
• Experience designing or implementing automated workflows, data pipelines, dashboards, security metrics, or reporting solutions
• Working knowledge of cybersecurity principles, including security controls, vulnerability management, continuous monitoring, and regulatory compliance
• Familiarity with modern software development practices and CI/CD workflows
• Strong analytical skills, with the ability to interpret complex security and technical data and translate findings into actionable insights and meaningful performance metrics
• Excellent written and verbal communication skills, with the ability to collaborate effectively across security, engineering, product, and program teams
• Ability to obtain and maintain the background investigation approval and system access required to support Department of Veterans Affairs environments
• US citizenship or permanent resident status, as required for this position

Nice to have:

• Experience supporting federal cybersecurity programs or systems governed by the NIST Risk Management Framework (RMF)
• Knowledge of NIST SP 800-53 Revision 5 security controls
• Familiarity with federal Authority to Operate (ATO) processes, Plans of Action and Milestones (POA&Ms), control implementation evidence, and independent security assessments
• Experience with OSCAL or other machine-readable compliance frameworks
• Automated security evidence collection
• Continuous monitoring
• Security assessment workflows
• Familiarity with AWS security services such as Security Hub and GuardDuty, as well as GitHub Actions or comparable CI/CD platforms
• Experience with Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), secrets detection, container scanning, or similar application security technologies
• Experience with SBOM standards and tools, software dependency analysis, and third-party component risk management
• Experience building security posture, vulnerability management, or compliance dashboards, ideally in large-scale cloud environments supporting multiple product and engineering teams

Benefits

• Medical, dental, and vision insurance
• Access to an HSA with employer contributions when enrolled in an eligible health plan
• Employer-paid life insurance, accidental death coverage, and short-term and long-term disability benefits
• Voluntary accident, hospital indemnity, and critical care insurance
• Voluntary healthcare and dependent care Flexible Spending Accounts (FSAs)
• Accrued paid leave and company-paid holidays
• Access to a 401(k) retirement plan with employer matching contributions
• The convenience of working from home
• The opportunity to contribute to the modernization and security of government digital services that support important public-sector programs
• Hands-on experience with security automation, cloud technologies, DevSecOps, compliance engineering, vulnerability management, and software supply-chain security
• Opportunities to work alongside multidisciplinary teams focused on scalable technology, operational excellence, and sustainable cybersecurity improvements

Important Details

• Work arrangement: fully remote from within the United States
• Schedule: standard Monday-to-Friday business hours; occasional extended or weekend hours may be necessary to meet operational requirements
• Travel: limited travel may be required for customer meetings or industry events

About the Company

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Automation / Cyber Security Engineer based in the United States. The company supports essential public services.

We’re reinventing job search.

Headquarters

US

Open jobs

2015

Website

jobgether.com