DevSecOps Engineer

Job Summary Newberry Group is seeking an experienced DevSecOps Engineer to support our DISA customer. The DevSecOps Engineer provides security engineering expertise to Mission Partners, system owners, ISSMs/ISSOs, architects, and software development teams throughout the SDLC. The position integrates cybersecurity requirements and controls directly into Agile development and CI/CD processes, enabling development teams to identify and address security issues earlier in the lifecycle and securely move applications and capabilities from concept through production. Location Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly). Salary $130,000 to $150,000 annually Essential Duties and Responsibilities: Embed cybersecurity engineering into Agile software development and modernization activitiesIntegrate security requirements and controls throughout the SDLC and CI/CD pipelinesApply DevSecOps and shift-left security principles to identify and remediate vulnerabilities earlier in developmentImplement and support automated security testing within CI/CD workflowsParticipate with development teams in requirements discussions, design activities, sprint planning, and other lifecycle eventsTranslate RMF, NIST SP 800-53, DoD cybersecurity policy, STIGs, SRGs, and related security requirements into actionable development and engineering tasksCollaborate with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls before formal assessmentProvide threat-informed security engineering guidance for legacy, modernized, and cloud-native applicationsSupport secure development involving APIs, microservices, containerized workloads, and other modern application architectures as applicableHelp development teams remediate security vulnerabilities while preserving mission functionality and delivery objectivesProvide engineering recommendations for technical controls such as authentication, encryption, network segmentation, and application securityCommunicate security findings, technical risks, recommended remediation, and implementation approaches to technical and Government stakeholdersManage security-engineering activities across multiple concurrent projects and development sprints Required Skills, Qualifications and Experience: Bachelor’s degree and 10+ years of related experienceDoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSECMust have and maintain a current DoD Top Secret clearanceMust reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly)Demonstrated experience integrating cybersecurity into Agile SDLC environmentsDemonstrated hands-on experience with CI/CD pipelinesPractical experience implementing DevSecOps and shift-left security practicesExperience using automated security testing tools within software development processesKnowledge of RMF, NIST SP 800-37, and NIST SP 800-53Knowledge and practical application of DoD STIGs and SRGsAbility to convert security/compliance requirements into specific technical development tasks and controlsUnderstanding of modern application architectures and cloud-native developmentAbility to collaborate effectively with cybersecurity, engineering, architecture, and software-development teamsStrong written and verbal communication skillsAbility to manage multiple development efforts and sprints in a high-tempo environment Who We Are… Newberry Group is a performance-driven government services and solutions firm that provides security compliance, program governance, consulting, and customized solutions for public sector clients nationwide. The strength of our company is a direct reflection of our highly skilled and talented workforce. Benefits And Perks In addition to competitive wages, Newberry Group offers an outstanding benefit package. This includes medical coverage with three plan options, dental and vision coverage, personal time off, paid holidays, paid parental leave, telecommuting if available, retirement savings accounts (Pre-Tax and Roth), flexible and dependent care savings accounts, life insurance, long and short-term disability coverage, tuition and training reimbursement, employee assistance program, and more. The Newberry Group, Inc. is an Equal Opportunity Employer – EEO/AA/Disability/Veterans. Powered by JazzHR fwmlJKbUEx