DevSecOps Engineer: Secure SDLC & CI/CD Innovator

August Schell; Fort Meade (MD); Hybrid; USD 100,000 - 155,000; Full time

Job summary

August Schell is seeking a DevSecOps Engineer in the Fort Meade, MD area. The role focuses on embedding cybersecurity into Agile development, integrating security across SDLC and CI/CD, and applying shift-left security principles throughout projects.

The ideal candidate has DoD Top Secret clearance, 10+ years of related experience, and certifications like CCSP, CISSP, or similar. Hybrid onsite work entails four days on-site weekly in support of mission-critical systems.

Qualifications

• Bachelor’s degree and 10+ years of related experience.
• DoD 8140 Work Role 652 – Security Architect Certification required (one of CCSP, CISSP, CSSLP, CISM, etc.).
• Must have and maintain a current DoD Top Secret clearance.
• Must reside within commutable distance of Fort Meade, MD (hybrid onsite schedule).
• Experience integrating cybersecurity into Agile SDLC environments.
• Hands-on experience with CI/CD pipelines.
• Practical experience implementing DevSecOps and shift-left security practices.
• Experience using automated security testing tools within software development.
• Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
• Knowledge and practical application of DoD STIGs and SRGs.
• Ability to convert security requirements into specific development tasks and controls.
• Understanding of modern application architectures.

Responsibilities

• Embed cybersecurity engineering into Agile software development and modernization activities.
• Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
• Apply DevSecOps and shift-left security principles to identify and remediate vulnerabilities earlier in development.
• Implement and support automated security testing within CI/CD workflows.
• Collaborate with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls before formal assessment.
• Provide threat-informed security engineering guidance for legacy, modernized, and cloud-native applications.
• Support secure development involving APIs, microservices, containerized workloads, and other modern application architectures as applicable.
• Help development teams remediate security vulnerabilities while preserving mission functionality and delivery objectives.
• Provide engineering recommendations for technical controls such as authentication, encryption, network segmentation, and application security.
• Communicate security findings, technical risks, recommended remediation, and implementation approaches to technical and Government stakeholders.
• Manage security-engineering activities across multiple concurrent projects and development sprints.

Skills

DevSecOps

CI/CD pipelines

Agile SDLC

Security engineering

Threat-informed security

Communication skills

Education

Bachelor’s degree

Tools

Automated security testing tools

Job description

August Schell is seeking a DevSecOps Engineer in the Fort Meade, MD area. The role focuses on embedding cybersecurity into Agile development, integrating security across SDLC and CI/CD, and applying shift-left security principles throughout projects.

The ideal candidate has DoD Top Secret clearance, 10+ years of related experience, and certifications like CCSP, CISSP, or similar. Hybrid onsite work entails four days on-site weekly in support of mission-critical systems.