出海雷达

高级网络安全工程师

Senior Cyber Security Engineer

开发工程限定地区(需当地身份)
公司SprezzMC
薪资$130,000 - $190,000/年
工作地点United States
地域资格限定地区(需当地身份)
时区要求日间重叠约 9 小时,基本正常作息
用工类型Full Time
发布时间13 天前
数据来源Himalayas
前往 Himalayas 查看并投递 →
注意地域限制:该职位明确限定在 United States 招聘。如果你是位于中国大陆的求职者,通常需要当地工作身份才能投递,或需与雇主确认是否接受独立合同(Contractor)形式合作。

职位名称:高级网络安全工程师
地点:远程(美国)

其他要求:美国公民或永久居民(必需)

职位概述

高级网络安全工程师是一个资深的、亲自参与的安全领导角色,负责加强安全交付,同时通过自动化和人工智能识别并实施改进安全工作的机会。

该职位需要对联邦网络安全要求有深入的经验,包括风险管理体系(RMF)、NIST 标准、FIPS 199、授权与评估(A&A)、安全控制、POA&M 管理以及系统授权活动。

该职位将与网络安全团队、项目领导、卓越中心(COEs)和其他交付职能合作,提高一致性,减少手动工作量,加强合规性,并引入实用的人工智能和自动化能力,以提高网络安全交付的质量和可预测性。

职责

  • 为网络安全团队和工作流提供高级技术及交付指导
  • 保持对安全交付活动、风险、依赖关系和不断变化的客户期望的了解
  • 支持 RMF 实施、A&A 活动、安全控制审查、文件准备、POA&M 管理、系统授权、配置管理及相关安全活动
  • 识别安全实践中的差距,并制定策略以提高质量、一致性和效率,以及审计准备度
  • 与安全负责人和个别贡献者合作,加强执行力度并建立一致的交付标准
  • 指导安全从业者和团队负责人,同时促进问责制、持续改进和知识共享
  • 识别可以通过自动化、人工智能或流程重新设计来改进的重复性、手动、易出错或高摩擦的安全流程
  • 制定并维护网络安全自动化机会的优先级路线图和待办事项列表
  • 领导开发可重用的人工智能提示、自动化模板、流程加速器和标准化方法,用于重复性的安全活动
  • 在 RMF 和 A&A 流程、控制审查、文件验证、POA&M 管理、文档、合规跟踪、报告、数据核对和质量保证等领域应用自动化和人工智能
  • 开发提示工程指南、使用文档和针对性培训,以支持责任部门
查看英文原文

Position Title: Senior Cyber Security Engineer
Location: Remote (In the U.S)

Other Considerations:U.S. Citizen or Permanent Resident (Required)

POSITION SUMMARY

The Senior Cyber Security Engineer is a senior, hands-on cybersecurity leader responsible for strengthening security delivery while identifying and implementing opportunities to improve how security work is performed through automation and AI.

This role requires deep experience with federal cybersecurity requirements, including the Risk Management Framework (RMF), NIST standards, FIPS 199, Authorization and Assessment (A&A), security controls, POA&M management, and system authorization activities.

The role will work across cybersecurity teams, program leadership, Centers of Excellence (COEs), and other delivery functions to improve consistency, reduce manual effort, strengthen compliance, and introduce practical AI and automation capabilities that improve the quality and predictability of cybersecurity delivery.

RESPONSIBILITIES

  • Provide senior-level technical and delivery guidance across cybersecurity teams and workstreams
  • Maintain awareness of security delivery activities, risks, dependencies, and evolving client expectations
  • Support RMF implementation, A&A activities, security control reviews, artifact preparation, POA&M management, system authorization, configuration management, and related security activities
  • Identify gaps across security practices and develop strategies to improve quality, consistency, efficiency, and audit readiness
  • Work with security leads and individual contributors to strengthen execution and establish consistent delivery standards
  • Mentor security practitioners and team leads while promoting accountability, continuous improvement, and knowledge sharing
  • Identify repetitive, manual, error-prone, or high-friction security processes that can be improved through automation, AI, or workflow redesign
  • Develop and maintain a prioritized roadmap and backlog of cybersecurity automation opportunities
  • Lead development of reusable AI prompts, automation templates, workflow accelerators, and standardized approaches for recurring security activities
  • Apply automation and AI to areas such as RMF and A&A workflows, control reviews, artifact validation, POA&M management, documentation, compliance tracking, reporting, data reconciliation, and quality assurance
  • Develop prompt engineering guidance, usage documentation, and targeted training to support responsible AI adoption across cybersecurity teams
  • Partner with technical resources and stakeholders to move automation opportunities from concept through implementation
  • Drive continuous improvement in the accuracy, completeness, consistency, and audit readiness of cybersecurity deliverables
  • Collaborate across security teams, COEs, program leadership, architecture, platform operations, sustainment, reporting, and other stakeholders to align security and automation efforts with broader program priorities
  • Track and communicate progress, risks, dependencies, adoption, and measurable improvements resulting from cybersecurity automation and process improvement initiatives

QUALIFICATIONS

  • Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or a related field. (Master’s preferred)
  • CISSP or comparable industry-recognized cybersecurity credential
  • 10+ years of experience working with or leading diverse technical or cybersecurity teams, including subcontractor resources
  • 5+ years of federal information systems security experience
  • 5+ years of hands-on Risk Management Framework (RMF) experience
  • In-depth knowledge of NIST standards, FIPS 199, and federal information system security requirements
  • Demonstrated experience with A&A activities, security control reviews, POA&M management, system authorizations, configuration management, and security documentation
  • Familiarity with multiple cybersecurity compliance frameworks
  • Demonstrated experience identifying and improving inefficient or manual cybersecurity processes
  • Experience applying automation to cybersecurity, compliance, technical, or operational workflows
  • Practical experience using AI-enabled tools, prompt engineering, or AI-assisted workflows to improve productivity, consistency, or quality
  • Strong communication and leadership skills with the ability to work across technical teams, program leadership, and client stakeholders

WORKING CONDITIONS

Standard Business hours are Monday through Friday. Occasional extended or weekend hours may be required based on operational needs. Must have reliable internet service that allows for effective telecommuting.

PAY RANGE

The base salary range for this position is $130,000 to $190,000 annually, depending on geographic work location, relevant experience, skills, education, internal equity, security clearance, and contract requirements. Geographic salary ranges are determined in accordance with the company's compensation practices and represent a good-faith estimate of the compensation for this position at the time of posting.

BENEFITS

Sprezzatura offers a comprehensive and flexible benefit package to include:

  • Medical, Dental, and Vision
  • Health Saving Account (when enrolled in eligible plan) with Company contribution
  • Company paid Life, Accidental Death, Short-term & Long-term Disability
  • Voluntary Accident, Hospital Indemnity, & Critical Care Insurance
  • Voluntary Medical & Dependent Care Flexible Spending Accounts
  • Accrued Paid Time Off & Company Paid Holidays
  • 401(k) Retirement Plan with Company match

WORK AUTHORIZATION

Sprezzatura participates in E-Verify and will provide the federal government with your I-9 information to confirm that you are authorized to work in the U.S.

Sprezzaturais a mission-driven, Service-Disabled Veteran-Owned Small Business (SDVOSB) that thrives at the intersection of technology, innovation, and impact. We specialize in secure, scalable, and human-centered digital solutions that accelerate government transformation. Our work spans DevSecOps, health IT modernization, intelligent automation, benefits delivery, and digital communications. We partner with agencies ready to evolve—delivering not just strategy, but measurable execution. Rooted in operational excellence and driven by curiosity, we help our clients navigate complexity with clarity—turning ambitious ideas into real-world outcomes. No buzzwords. Just impact.

EEO STATEMENT

Sprezzatura is an Equal Opportunity Employer. We do not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other legally protected characteristic. Applicants have the right to discuss, disclose, or inquire about compensation without retaliation. Reasonable accommodations are available for qualified individuals with disabilities.

This job description is not intended to be an employment contract and does not guarantee employment for any specific duration.

Originally posted on Himalayas

本页面信息整理自 Himalayas,版权归原发布方所有。职位可能随时关闭,投递请以原始页面为准。 本站只做信息聚合展示,不参与招聘流程,也不向求职者收取任何费用。

该公司其他在招职位

项目经理

SprezzMCUnited States$125,000 - $135,000/年Full Time10 天前
职能支持限定地区(需当地身份)

业务流程工程师

SprezzMCUnited States$112,000 - $139,000/年Full Time14 天前
开发工程设计限定地区(需当地身份)

高级业务分析师

SprezzMCUnited States$112,000 - $130,000/年Full Time15 天前
其他限定地区(需当地身份)

← 返回全部职位