Cyber Security Engineer

Cybersecurity Jobs; Fort Meade (MD); Hybrid; USD 130,000 - 150,000; Full time

Job summary

SHR Consulting Group, LLC, based in Fort Meade, MD, is seeking an experienced cybersecurity engineer for a hybrid role. You will secure cloud-hosted applications and infrastructure, implement security controls, and support security authorization and continuous monitoring across the full development lifecycle.

The ideal candidate has 5+ years of cybersecurity engineering experience, is proficient with GCP, and holds a CompTIA Security+ or equivalent certification.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent relevant experience).
• 5+ years of cybersecurity engineering, security operations, or information systems security experience.
• Experience securing cloud-hosted applications and infrastructure, preferably within Google Cloud Platform (GCP).
• Experience with NIST SP 800-53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.
• Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.
• Experience supporting security assessments and remediation of identified vulnerabilities.
• CompTIA Security+ (or equivalent industry-recognized security certification) Required.

Responsibilities

• You will provide cybersecurity engineering support across development, testing, staging, and production, helping ensure security is addressed throughout the full lifecycle.
• The focus includes implementing technical security controls aligned to organizational and federal requirements, and supporting security authorization, assessment, and continuous monitoring activities.
• Support cybersecurity engineering across development, test, staging, and production environments.
• Secure applications and infrastructure hosted in Google Cloud Platform (GCP).
• Implement and maintain security controls aligned to applicable organizational and federal security requirements.
• Support security authorization, assessment, and continuous monitoring activities.
• Identify, analyze, track, prioritize, and support remediation of vulnerabilities.
• Review security scan results, coordinate remediation with engineering and development teams, and validate corrective actions.
• Develop and maintain security artifacts and supporting documentation related to vulnerabilities and remediation efforts.
• Integrate automated security testing and security controls into DevSecOps and CI/CD processes.
• Support incident response activities, including investigation, containment, remediation, and root cause analysis.
• Support security logging, monitoring, alerting, and audit capabilities.
• Develop and maintain security documentation and evidence supporting assessments, audits, releases, and change-control activities.
• Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
• Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.

Skills

5+ years cybersecurity engineering

Cloud security experience

DevSecOps practices

Agile/SAFe planning

Education

Bachelor's degree in Cybersecurity or related field

Tools

Google Cloud Platform (GCP)

NIST SP 800-53

FISMA

RMF

CompTIA Security+

Job description

SHR Consulting Group, LLC supports cybersecurity work that strengthens national security and public welfare through hands-on engineering and operational security support. In this hybrid role based in Ft Meade, MD, you'll help secure enterprise applications and cloud environments while operating in a collaborative, flexible, forward-thinking culture. Competitive compensation, comprehensive benefits, and career development opportunities are included. Salary range: USD 130,000 - 150,000 per yearly.

What you'll do

You will provide cybersecurity engineering support across development, testing, staging, and production, helping ensure security is addressed throughout the full lifecycle. The focus includes implementing technical security controls aligned to organizational and federal requirements, and supporting security authorization, assessment, and continuous monitoring activities.

• Support cybersecurity engineering across development, test, staging, and production environments.
• Secure applications and infrastructure hosted in Google Cloud Platform (GCP).
• Implement and maintain security controls aligned to applicable organizational and federal security requirements.
• Support security authorization, assessment, and continuous monitoring activities.
• Identify, analyze, track, prioritize, and support remediation of application, infrastructure, cloud, and configuration vulnerabilities.
• Review security scan results, coordinate remediation with engineering and development teams, and validate corrective actions.
• Develop and maintain security artifacts and supporting documentation related to vulnerabilities and remediation efforts.
• Integrate automated security testing and security controls into DevSecOps and CI/CD processes.
• Support incident response activities, including investigation, containment, remediation, and root cause analysis.
• Support security logging, monitoring, alerting, and audit capabilities.
• Develop and maintain security documentation and evidence supporting assessments, audits, releases, and change-control activities.
• Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
• Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.

What you bring

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent relevant experience).
• 5+ years of cybersecurity engineering, security operations, or information systems security experience.
• Experience securing cloud-hosted applications and infrastructure, preferably within Google Cloud Platform (GCP).
• Experience with NIST SP 800-53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.
• Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.
• Experience supporting security assessments and remediation of identified vulnerabilities.
• CompTIA Security+ (or equivalent industry-recognized security certification) Required.

Technologies

• Google Cloud Platform (GCP)
• Google Cloud Professional Cloud Security Engineer
• NIST SP 800-53
• FISMA
• RMF
• DevSecOps
• CI/CD
• Agile
• SAFe

Certifications

• CompTIA Security+ or equivalent industry-recognized security certification (Required)
• CISSP; CCSP; Google Cloud Professional Cloud Security Engineer; CompTIA CySA+; GIAC certifications (Preferred)