Remote Lead Security Engineer — Zero Trust & DevSecOps

Dev Technology Group; Bowie (MD); On-site; USD 120,000 - 190,000; Full time

Job summary

Dev Technology Group is seeking a Subject Matter Expert–level Lead Security Engineer to lead application security across a large-scale, cloud-native federal modernization program in Suitland, MD. You will architect Zero Trust, drive ATO activities, and oversee SAST/DAST testing, threat modeling, and remediation within a DevSecOps SDLC.

You will collaborate with senior government stakeholders and the Office of Information Security to embed security into every phase of development, and may

Qualifications

• Lead security in DevSecOps SDLC with CI/CD gates.
• Implement Zero Trust for apps, workloads and data.
• Direct SAST/DAST and threat modeling activities.
• Support ATO processes and POA&M management.
• Experience with NIST CSF and NIST 800-53 controls.

Responsibilities

• Lead design and implementation of application security across all SDLC phases.
• Apply Zero Trust architecture for applications, data, and workloads.
• Integrate security into DevSecOps pipelines with SBOM generation.
• Oversee vulnerability testing and remediation (SAST/DAST).
• Drive threat modeling and document mitigation strategies.
• Support ATO activities, evidence collection, and POA&M tracking.
• Collaborate with developers, data engineers, and OIS stakeholders.

Skills

SME leadership

Zero Trust

DevSecOps

Threat modeling

SAST/DAST

ATO/POA&M

NIST 800-53

NIST CSF

SBOM

FedRAMP

Cloud security

Education

Bachelor's degree in IT/CS/Cybersecurity

Tools

SIEM

Job description

Dev Technology Group is seeking a Subject Matter Expert–level Lead Security Engineer to lead application security across a large-scale, cloud-native federal modernization program in Suitland, MD. You will architect Zero Trust, drive ATO activities, and oversee SAST/DAST testing, threat modeling, and remediation within a DevSecOps SDLC.

You will collaborate with senior government stakeholders and the Office of Information Security to embed security into every phase of development, and may