Cybersecurity Engineer
Job Description
SHR Consulting Group, LLC seeks a Cybersecurity Engineer to deliver hands-on security engineering and operational security support for enterprise applications and cloud environments.
Responsibilities
- Provide cybersecurity engineering support across development, testing, staging, and production environments.
- Support security for applications and infrastructure hosted in Google Cloud Platform (GCP).
- Implement and maintain technical security controls aligned to organizational and federal security requirements.
- Support security authorization, assessment, and continuous monitoring activities.
- Identify, analyze, track, prioritize, and support remediation of application, infrastructure, cloud, and configuration vulnerabilities.
- Review security scan results, assess findings, coordinate remediation with engineering and development teams, and validate corrective actions.
- Develop and maintain security artifacts and supporting documentation for vulnerabilities and remediation activities.
- Integrate automated security testing and security controls into DevSecOps and CI/CD processes.
- Support incident response activities including investigation, containment, remediation, and root cause analysis.
- Support security logging, monitoring, alerting, and audit capabilities.
- Develop and maintain security documentation and evidence for security assessments, audits, releases, and change-control activities.
- Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
- Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.
Requirements
- Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent relevant experience).
- 5+ years of cybersecurity engineering, security operations, or information systems security experience.
- Experience securing cloud-hosted applications and infrastructure, preferably in Google Cloud Platform (GCP).
- Experience with NIST SP 800-53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.
- Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.
- Experience supporting security assessments and remediation of identified vulnerabilities.
- Security+, CISSP, CCSP, Google Cloud security certification, or equivalent certification preferred.
- CompTIA Security+ (required) or equivalent industry-recognized security certification.
Technologies
- Google Cloud Platform (GCP)
- DevSecOps
- CI/CD
- Agile
- SAFe
- NIST SP 800-53
- FISMA
- RMF
- PII
Certifications
- CompTIA Security+ or equivalent industry-recognized security certification (Required)
- CISSP; CCSP; Google Cloud Professional Cloud Security Engineer; CompTIA CySA+; GIAC certifications (Preferred)
Why Join SHR Consulting Group
- Contribute to impactful government initiatives that enhance national security and public welfare.
- Collaborative, flexible, and forward-thinking work environment.
- Competitive compensation, comprehensive benefits, and career development opportunities.
Location: Ft Meade, MD (Hybrid)
Compensation: USD 130,000 - 150,000 per yearly
Experience: 5 years minimum