Senior DevSecOps Security Engineer - Zero Trust & ATO Lead

Onyx Government Services; Suitland (MD); On-site; USD 130,000 - 180,000; Full time

Job summary

Onyx Government Services is seeking a knowledgeable Lead Security Engineer to lead application security across a large-scale, cloud-native federal modernization program for the U.S. Census Bureau. The role focuses on embedding security into every phase of the System Development Life Cycle (SDLC) using a DevSecOps methodology.

The successful candidate will enforce Zero Trust principles and manage security testing and threat modeling activities while coordinating with senior Government stakeholders. A relevant Bachelor's degree and 15+ years of experience in IT/cybersecurity are required.

Qualifications

• Demonstrated expertise integrating security into a DevSecOps SDLC.
• Hands-on experience implementing Zero Trust Architecture.
• Proven experience leading vulnerability assessments and penetration testing.
• Experience supporting the ATO lifecycle.

Responsibilities

• Lead application security in a cloud-native modernization program.
• Architect and enforce Zero Trust principles and ATO activities.
• Direct application security testing, threat modeling, and vulnerability remediation.
• Interface with senior Government stakeholders.

Skills

Integration of security into DevSecOps SDLC

Zero Trust Architecture implementation

Vulnerability assessments

Experience leading penetration testing

Problem solving

Analytical skills

Education

Bachelor’s Degree in Information Technology, Computer Science, or Cybersecurity

Tools

NIST SP 800-53 controls

NIST Cybersecurity Framework

Job description

Onyx Government Services is seeking a knowledgeable Lead Security Engineer to lead application security across a large-scale, cloud-native federal modernization program for the U.S. Census Bureau. The role focuses on embedding security into every phase of the System Development Life Cycle (SDLC) using a DevSecOps methodology.

The successful candidate will enforce Zero Trust principles and manage security testing and threat modeling activities while coordinating with senior Government stakeholders. A relevant Bachelor's degree and 15+ years of experience in IT/cybersecurity are required.