jobapplier

DevSecOps Engineer

augustschell

About augustschell

  • Our team delivers expert knowledge in cyber security, big data, endpoint security and cloud solutions.
  • Our ability to serve our customers with continued excellence is a direct reflection of our dedicated and exceptional people.
  • At August Schell, we are not only a team, we are family.

Responsibilities

  • 100-155K The DevSecOps Engineer provides security engineering expertise to Mission Partners, system owners, ISSMs/ISSOs, architects, and software development teams throughout the SDLC.
  • The position integrates cybersecurity requirements and controls directly into Agile development and CI/CD processes, enabling development teams to identify and address security issues earlier in the lifecycle and securely move applications and capabilities from concept through production.
  • Embed cybersecurity engineering into Agile software development and modernization activities.
  • Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
  • DevSecOps and shift-left security principles to identify and remediate vulnerabilities earlier in development.
  • Implement and support automated security testing within CI/CD workflows.
  • Participate with development teams in requirements discussions, design activities, sprint planning, and other lifecycle events.
  • Translate RMF, NIST SP 800-53, DoD cybersecurity policy, STIGs, SRGs, and related security requirements into actionable development and engineering tasks.
  • Collaborate with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls before formal assessment.
  • Provide threat-informed security engineering guidance for legacy, modernized, and cloud-native applications.
  • Support secure development involving APIs, microservices, containerized workloads, and other modern application architectures as applicable.
  • Help development teams remediate security vulnerabilities while preserving mission functionality and delivery objectives.
  • Provide engineering recommendations for technical controls such as authentication, encryption, network segmentation, and application security.
  • Communicate security findings, technical risks, recommended remediation, and implementation approaches to technical and Government stakeholders.
  • Manage security-engineering activities across multiple concurrent projects and development sprints.

Requirements

  • Bachelor’s degree and 10+ years of related experience.
  • DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
  • Must have and maintain a current DoD Top Secret clearance.
  • Must reside within a commutable distance of Fort Meade, MD in order to work a hybrid onsite schedule (4 days onsite weekly).
  • Demonstrated experience integrating cybersecurity into Agile SDLC environments.
  • Demonstrated hands-on experience with CI/CD pipelines.
  • Practical experience implementing DevSecOps and shift-left security practices.
  • Experience using automated security testing tools within software development processes.
  • Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
  • Knowledge and practical application of DoD STIGs and SRGs.
  • Ability to convert security/compliance requirements into specific technical development tasks and controls.
  • Understanding of modern application architectures and cloud-native development.
  • Ability to collaborate effectively with cybersecurity, engineering, architecture, and software-development teams.
  • Strong written and verbal communication skills.
  • Ability to manage multiple development efforts and sprints in a high-tempo environment.
  • Who we are...
  • August Schell offers 30 years of experience in providing our customers innovative solutions and engineering services to their most challenging needs.
  • We thrive on navigating complex IT difficulties and are driven to find the best solutions for our customers.