Cyber Security Engineer

SHR Consulting Group, LLC supports cybersecurity work that strengthens national security and public welfare through hands-on engineering and operational security support. In this hybrid role based in Ft Meade, MD, you'll help secure enterprise applications and cloud environments while operating in a collaborative, flexible, forward-thinking culture. Competitive compensation, comprehensive benefits, and career development opportunities are included. Salary range: USD 130,000 - 150,000 per yearly.

What you'll do

You will provide cybersecurity engineering support across development, testing, staging, and production, helping ensure security is addressed throughout the full lifecycle. The focus includes implementing technical security controls aligned to organizational and federal requirements, and supporting security authorization, assessment, and continuous monitoring activities.

Support cybersecurity engineering across development, test, staging, and production environments.

Secure applications and infrastructure hosted in Google Cloud Platform (GCP).

Implement and maintain security controls aligned to applicable organizational and federal security requirements.

Support security authorization, assessment, and continuous monitoring activities.

Identify, analyze, track, prioritize, and support remediation of application, infrastructure, cloud, and configuration vulnerabilities.

Review security scan results, coordinate remediation with engineering and development teams, and validate corrective actions.

Develop and maintain security artifacts and supporting documentation related to vulnerabilities and remediation efforts.

Integrate automated security testing and security controls into DevSecOps and CI/CD processes.

Support incident response activities, including investigation, containment, remediation, and root cause analysis.

Support security logging, monitoring, alerting, and audit capabilities.

Develop and maintain security documentation and evidence supporting assessments, audits, releases, and change-control activities.

Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.

Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.

What you bring

Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field (or equivalent relevant experience).

5+ years of cybersecurity engineering, security operations, or information systems security experience.

Experience securing cloud-hosted applications and infrastructure, preferably within Google Cloud Platform (GCP).

Experience with NIST SP 800-53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.

Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.

Experience supporting security assessments and remediation of identified vulnerabilities.

CompTIA Security+ (or equivalent industry-recognized security certification) Required.

Technologies

Google Cloud Platform (GCP)

Google Cloud Professional Cloud Security Engineer

NIST SP 800-53

FISMA

RMF

DevSecOps

CI/CD

Agile

SAFe

Certifications

CompTIA Security+ or equivalent industry-recognized security certification (Required)

CISSP; CCSP; Google Cloud Professional Cloud Security Engineer; CompTIA CySA+; GIAC certifications (Preferred)

#J-18808-Ljbffr