Cyber Automation Engineer

Booz Allen Hamilton•McLean, VA

3d•$86,800 - $198,000•Remote

About The Position

As a Cyber Automation Engineer, you know how to leverage DevSecOps principles to automate complex cyber activities and streamline security operations. We’re looking for a security-focused automation engineer like you to incorporate open-source tools, cloud resources, and continuous integration/delivery (CI/CD) to reduce manual effort across the cyber mission and strengthen automated defense and response. You’ll work to automate critical cybersecurity workflows, including vulnerability scanning, patch orchestration, continuous monitoring, and repetitive SOC tasks. You’ll sharpen your skills within a DevSecOps framework to embed security metrics directly into delivery platforms, implement software supply chain risk management, and protect deployment paths. Whether engineering API integrations between modern security tools, scripting automated playbooks, or hardening cloud-native environments, here you’ll help support innovative tech projects by ensuring the environments are in compliance with enterprise standards and secure to ensure risk is minimized.

Requirements

Experience with Linux, Windows Server, and MacOS
Experience with monitoring and logging tools such as Crowdstrike, Splunk, or ServiceNow
Experience with Chainguard images or hardened container base images for supply chain security
Experience with artifact and container registries such as Sonatype Nexus and JFrog Artifactory for image storage and dependency management
Experience embedding security into CI/CD pipelines such as shift-left, including SAST, DAST, and SCA, infrastructure-as-code scanning, container image scanning, and policy-as-code gates
Experience with GitHub DevSecOps workflows, including Actions and CI security jobs, branch protection, CODEOWNERS, required reviews, secret scanning, and Dependabot
Experience securing cloud-native delivery platforms such as AWS, Docker, or Kubernetes used by development teams, including admission controls and network policies
Experience with identity and access management, including secure communication protocols, HTTPS, TLS, SSL, SSH, SSO, MFA, RBAC, and identity federation
Ability to obtain a Secret clearance
Bachelor's degree and 1+ years of experience with software development, DevSecOps, or cyber automation or 5+ years of experience with software development, DevSecOps, or cyber automation in lieu of a degree

Nice To Haves

Experience automating cybersecurity workflows while applying least privilege, secrets management, and DoD or IC security principles

Responsibilities

Automate critical cybersecurity workflows, including vulnerability scanning, patch orchestration, continuous monitoring, and repetitive SOC tasks.
Embed security metrics directly into delivery platforms.
Implement software supply chain risk management.
Protect deployment paths.
Engineer API integrations between modern security tools.
Script automated playbooks.
Harden cloud-native environments.
Ensure environments are in compliance with enterprise standards and secure to ensure risk is minimized.