Senior Cyber Security Engineer

Sprezzatura is a mission-driven technology company delivering secure, scalable, and human-centered digital solutions for government transformation. The Senior Cyber Security Engineer will provide senior technical and delivery guidance, support federal cybersecurity and RMF activities, and improve security delivery through automation, AI, and workflow redesign. The role also leads process improvement, mentors cybersecurity practitioners, and coordinates security and automation efforts across teams and stakeholders.

Responsibilities:

• Provide senior-level technical and delivery guidance across cybersecurity teams and workstreams
• Maintain awareness of security delivery activities, risks, dependencies, and evolving client expectations
• Support RMF implementation, A&A activities, security control reviews, artifact preparation, POA&M management, system authorization, configuration management, and related security activities
• Identify gaps across security practices and develop strategies to improve quality, consistency, efficiency, and audit readiness
• Work with security leads and individual contributors to strengthen execution and establish consistent delivery standards
• Mentor security practitioners and team leads while promoting accountability, continuous improvement, and knowledge sharing
• Identify repetitive, manual, error-prone, or high-friction security processes that can be improved through automation, AI, or workflow redesign
• Develop and maintain a prioritized roadmap and backlog of cybersecurity automation opportunities
• Lead development of reusable AI prompts, automation templates, workflow accelerators, and standardized approaches for recurring security activities
• Apply automation and AI to areas such as RMF and A&A workflows, control reviews, artifact validation, POA&M management, documentation, compliance tracking, reporting, data reconciliation, and quality assurance
• Develop prompt engineering guidance, usage documentation, and targeted training to support responsible AI adoption across cybersecurity teams
• Partner with technical resources and stakeholders to move automation opportunities from concept through implementation
• Drive continuous improvement in the accuracy, completeness, consistency, and audit readiness of cybersecurity deliverables
• Collaborate across security teams, COEs, program leadership, architecture, platform operations, sustainment, reporting, and other stakeholders to align security and automation efforts with broader program priorities
• Track and communicate progress, risks, dependencies, adoption, and measurable improvements resulting from cybersecurity automation and process improvement initiatives

Requirements:

• U.S. Citizen or Permanent Resident (Required)
• Bachelor's degree in Computer Science, Cybersecurity, Information Systems, or a related field
• CISSP or comparable industry-recognized cybersecurity credential
• 10+ years of experience working with or leading diverse technical or cybersecurity teams, including subcontractor resources
• 5+ years of federal information systems security experience
• 5+ years of hands-on Risk Management Framework (RMF) experience
• In-depth knowledge of NIST standards, FIPS 199, and federal information system security requirements
• Demonstrated experience with A&A activities, security control reviews, POA&M management, system authorizations, configuration management, and security documentation
• Familiarity with multiple cybersecurity compliance frameworks
• Demonstrated experience identifying and improving inefficient or manual cybersecurity processes
• Experience applying automation to cybersecurity, compliance, technical, or operational workflows
• Practical experience using AI-enabled tools, prompt engineering, or AI-assisted workflows to improve productivity, consistency, or quality
• Strong communication and leadership skills with the ability to work across technical teams, program leadership, and client stakeholders
• Master's preferred