KarieR.co — Portal Lowongan Kerja Terpercaya

DevSecOps Engineer

location_onFort Meade, MDscheduleyesterday
sync_altWork style:Hybrid
historyMinimum experience:10+ years
schoolEducation:Bachelor’s degree
Apply Nowopen_in_new

Job description

DevSecOps EngineerFort Meade, MDSalary: 100-155KThe DevSecOps Engineer provides security engineering expertise to Mission Partners, system owners, ISSMs/ISSOs, architects, and software development teams throughout the SDLC. The position integrates cybersecurity requirements and controls directly into Agile development and CI/CD processes, enabling development teams to identify and address security issues earlier in the lifecycle and securely move applications and capabilities from concept through production. Primary Roles and Responsibilities:
  • Embed cybersecurity engineering into Agile software development and modernization activities.
  • Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
  • Apply DevSecOps and shift-left security principles to identify and remediate vulnerabilities earlier in development.
  • Implement and support automated security testing within CI/CD workflows.
  • Participate with development teams in requirements discussions, design activities, sprint planning, and other lifecycle events.
  • Translate RMF, NIST SP 800-53, DoD cybersecurity policy, STIGs, SRGs, and related security requirements into actionable development and engineering tasks.
  • Collaborate with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls before formal assessment.
  • Provide threat-informed security engineering guidance for legacy, modernized, and cloud-native applications.
  • Support secure development involving APIs, microservices, containerized workloads, and other modern application architectures as applicable.
  • Help development teams remediate security vulnerabilities while preserving mission functionality and delivery objectives.
  • Provide engineering recommendations for technical controls such as authentication, encryption, network segmentation, and application security.
  • Communicate security findings, technical risks, recommended remediation, and implementation approaches to technical and Government stakeholders.
  • Manage security-engineering activities across multiple concurrent projects and development sprints.

Requirements
  • Bachelor’s degree and 10+ years of related experience.
  • DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
  • Must have and maintain a current DoD Top Secret clearance.
  • Must reside within a commutable distance of Fort Meade, MD in order to work a hybrid onsite schedule (4 days onsite weekly).
  • Demonstrated experience integrating cybersecurity into Agile SDLC environments.
  • Demonstrated hands-on experience with CI/CD pipelines.
  • Practical experience implementing DevSecOps and shift-left security practices.
  • Experience using automated security testing tools within software development processes.
  • Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
  • Knowledge and practical application of DoD STIGs and SRGs.
  • Ability to convert security/compliance requirements into specific technical development tasks and controls.
  • Understanding of modern application architectures and cloud-native development.
  • Ability to collaborate effectively with cybersecurity, engineering, architecture, and software-development teams.
  • Strong written and verbal communication skills.
  • Ability to manage multiple development efforts and sprints in a high-tempo environment.
Who we are... August Schell offers 30 years of experience in providing our customers innovative solutions and engineering services to their most challenging needs. We thrive on navigating complex IT difficulties and are driven to find the best solutions for our customers. Our team delivers expert knowledge in cyber security, big data, endpoint security and cloud solutions. Our ability to serve our customers with continued excellence is a direct reflection of our dedicated and exceptional people. At August Schell, we are not only a team, we are family.

Skills mentioned

August Schell
Cybersecurity, IT Services
Fort Meade, MD
augustschell.com

August Schell delivers agile and innovative cybersecurity solutions that proactively defend and protect critical infrastructure against evolving cyber threats. With over three decades of expertise, the company specializes in designing, deploying, and implementing highly secure solutions for on-premise and cloud-based computing environments. August Schell serves government and commercial customers across all branches of the Federal government, large Wall Street financial organizations, and prestigious educational institutions, providing best-in-class systems and products that address complex security challenges. The company offers an extraordinary portfolio of capabilities including enterprise-scale identity management, big data security and visualization, network security and visibility, operational intelligence, data center security, cloud security, and software-defined data center solutions. August Schell leverages deep experience in supporting Defense and National Security organizations, partnering with leading-edge IT security vendors to deliver cutting-edge technology without boundaries. The team of engineers addresses a wide range of IT security challenges while maintaining ISO 9001 certification and commitment to protecting Americans from cyber threats.

View employer profilearrow_outward

Apply for this job

Use the application link supplied with this listing to apply to August Schell. Check the destination before entering personal information.

Apply Nowopen_in_new