Hybrid Cloud Security Engineer - GCP, DevSecOps

Cybersecurity Jobs; Fort Meade (MD); Hybrid; USD 130,000 - 150,000; Full time

Job summary

SHR Consulting Group, LLC, based in Fort Meade, MD, is seeking an experienced cybersecurity engineer for a hybrid role. You will secure cloud-hosted applications and infrastructure, implement security controls, and support security authorization and continuous monitoring across the full development lifecycle.

The ideal candidate has 5+ years of cybersecurity engineering experience, is proficient with GCP, and holds a CompTIA Security+ or equivalent certification.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent relevant experience).
• 5+ years of cybersecurity engineering, security operations, or information systems security experience.
• Experience securing cloud-hosted applications and infrastructure, preferably within Google Cloud Platform (GCP).
• Experience with NIST SP 800-53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.
• Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.
• Experience supporting security assessments and remediation of identified vulnerabilities.
• CompTIA Security+ (or equivalent industry-recognized security certification) Required.

Responsibilities

• You will provide cybersecurity engineering support across development, testing, staging, and production, helping ensure security is addressed throughout the full lifecycle.
• The focus includes implementing technical security controls aligned to organizational and federal requirements, and supporting security authorization, assessment, and continuous monitoring activities.
• Support cybersecurity engineering across development, test, staging, and production environments.
• Secure applications and infrastructure hosted in Google Cloud Platform (GCP).
• Implement and maintain security controls aligned to applicable organizational and federal security requirements.
• Support security authorization, assessment, and continuous monitoring activities.
• Identify, analyze, track, prioritize, and support remediation of vulnerabilities.
• Review security scan results, coordinate remediation with engineering and development teams, and validate corrective actions.
• Develop and maintain security artifacts and supporting documentation related to vulnerabilities and remediation efforts.
• Integrate automated security testing and security controls into DevSecOps and CI/CD processes.
• Support incident response activities, including investigation, containment, remediation, and root cause analysis.
• Support security logging, monitoring, alerting, and audit capabilities.
• Develop and maintain security documentation and evidence supporting assessments, audits, releases, and change-control activities.
• Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
• Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.

Skills

5+ years cybersecurity engineering

Cloud security experience

DevSecOps practices

Agile/SAFe planning

Education

Bachelor's degree in Cybersecurity or related field

Tools

Google Cloud Platform (GCP)

NIST SP 800-53

FISMA

RMF

CompTIA Security+

Job description

SHR Consulting Group, LLC, based in Fort Meade, MD, is seeking an experienced cybersecurity engineer for a hybrid role. You will secure cloud-hosted applications and infrastructure, implement security controls, and support security authorization and continuous monitoring across the full development lifecycle.

The ideal candidate has 5+ years of cybersecurity engineering experience, is proficient with GCP, and holds a CompTIA Security+ or equivalent certification.