Senior Security Engineer: Zero Trust & DevSecOps Leader

Dev Technology Group, Inc.; Suitland (MD); On-site; USD 120,000 - 190,000; Full time

Job summary

Dev Technology Group seeks a SME‑level Lead Security Engineer to steer application security for a large cloud‑native federal modernization program. You will embed security into the SDLC using DevSecOps, enforce Zero Trust, and drive ATO activities and security testing across a System of Systems.

The role interfaces with senior Government stakeholders and OIS, and may supervise others. You will help shape secure architectures, SBOM practices, and risk remediation across the program.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
• 15+ years of relevant IT/cybersecurity experience, SME level leadership.
• CISSP and CCSP certifications.
• Experience integrating security into a DevSecOps SDLC with CI/CD security gates and automated testing.
• Hands-on experience implementing Zero Trust Architecture and NIST SP 800-53 controls.

Responsibilities

• Lead design and implementation of application security solutions across all SDLC phases.
• Implement Zero Trust principles for applications, workloads, and data.
• Integrate security into DevSecOps pipelines with security gates and SBOM generation.
• Direct SAST/DAST, vulnerability assessments, and penetration testing.
• Lead threat modeling exercises to identify attack vectors and mitigations.
• Support ATO lifecycle activities and POA&M management.
• Implement security controls per NIST CSF and SP 800-53; remediate findings.
• Design secure architecture patterns including API security and secure logging.

Skills

Zero Trust

DevSecOps

SAST/DAST

Threat modeling

NIST 800-53

ATO management

SBOM generation

Cloud security

Security architecture

Stakeholder briefing

Education

Bachelor’s degree in IT/CS/Cybersecurity

Tools

CI/CD tools

Security testing tools

Job description

Dev Technology Group seeks a SME‑level Lead Security Engineer to steer application security for a large cloud‑native federal modernization program. You will embed security into the SDLC using DevSecOps, enforce Zero Trust, and drive ATO activities and security testing across a System of Systems.

The role interfaces with senior Government stakeholders and OIS, and may supervise others. You will help shape secure architectures, SBOM practices, and risk remediation across the program.