DevSecOps Engineer
August Schell Enterprises1 day ago
Fort Meade, MD, USAStaff+
Base Salary
$100k - $155k/yr
Responsibilities
- Embed cybersecurity engineering into Agile software development and modernization activities.
- Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
- Apply DevSecOps and shift-left security practices to identify and remediate vulnerabilities earlier in development.
- Implement and support automated security testing within software development workflows.
- Collaborate with development, architecture, cybersecurity, and government stakeholders on requirements, design, sprint planning, and lifecycle activities.
- Translate RMF, NIST, DoD cybersecurity, STIG, and SRG requirements into actionable engineering tasks and technical controls.
- Provide threat-informed security guidance for legacy, modernized, and cloud-native applications.
- Support secure development for APIs, microservices, containerized workloads, and modern application architectures.
- Recommend technical controls involving authentication, encryption, network segmentation, and application security.
- Communicate security findings, risks, remediation recommendations, and implementation approaches.
- Manage security-engineering activities across multiple concurrent projects and development sprints.
Requirements
- Bachelor’s degree and 10+ years of related experience.
- At least one qualifying certification: Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, or GSEC.
- Current DoD Top Secret clearance.
- Demonstrated experience integrating cybersecurity into Agile SDLC environments and hands-on CI/CD pipeline experience.
- Practical experience implementing DevSecOps, shift-left security, and automated security testing practices.
- Knowledge of RMF, NIST SP 800-37, NIST SP 800-53, DoD STIGs, and SRGs.
- Ability to convert security and compliance requirements into technical development tasks and controls.
- Understanding of modern application architectures and cloud-native development.
- Ability to collaborate across cybersecurity, engineering, architecture, and software-development teams.
- Strong written and verbal communication skills and the ability to manage multiple development efforts in a high-tempo environment.
Benefits
- Hybrid onsite schedule requiring four days onsite weekly.
- Must reside within a commutable distance of Fort Meade, Maryland.
Categories
About August Schell Enterprises
August Schell Enterprises provides cybersecurity consulting and systems integration for enterprises and U.S. government agencies, with offerings spanning identity management, cloud and data center security, endpoint management, and security event monitoring. The privately held firm, founded in 1991 and headquartered in Rockville, Maryland, designs and implements secure on‑premises and cloud environments. Its teams often support cleared federal initiatives in enterprise security architecture, compliance, and secure system implementation.