The Role
Provides DevSecOps and security engineering expertise for DoD applications across the SDLC. Integrates cybersecurity controls into Agile development and CI/CD pipelines, implements automated security testing, translates RMF, NIST, STIG, and SRG requirements into technical tasks, supports cloud-native and modern application architectures, and guides vulnerability remediation and secure control implementation across multiple concurrent projects.
Summary Generated by Built In
Job Summary
Newberry Group is seeking an experienced DevSecOps Engineer to support our DISA customer. The DevSecOps Engineer provides security engineering expertise to Mission Partners, system owners, ISSMs/ISSOs, architects, and software development teams throughout the SDLC. The position integrates cybersecurity requirements and controls directly into Agile development and CI/CD processes, enabling development teams to identify and address security issues earlier in the lifecycle and securely move applications and capabilities from concept through production.
Location
Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
Salary
$130,000 to $150,000 annually
Essential Duties and Responsibilities:
Who We Are…
Newberry Group is a performance-driven government services and solutions firm that provides security compliance, program governance, consulting, and customized solutions for public sector clients nationwide.
The strength of our company is a direct reflection of our highly skilled and talented workforce.
Benefits and Perks
In addition to competitive wages, Newberry Group offers an outstanding benefit package. This includes medical coverage with three plan options, dental and vision coverage, personal time off, paid holidays, paid parental leave, telecommuting if available, retirement savings accounts (Pre-Tax and Roth), flexible and dependent care savings accounts, life insurance, long and short-term disability coverage, tuition and training reimbursement, employee assistance program, and more.
The Newberry Group, Inc. is an Equal Opportunity Employer – EEO/AA/Disability/Veterans.
Newberry Group is seeking an experienced DevSecOps Engineer to support our DISA customer. The DevSecOps Engineer provides security engineering expertise to Mission Partners, system owners, ISSMs/ISSOs, architects, and software development teams throughout the SDLC. The position integrates cybersecurity requirements and controls directly into Agile development and CI/CD processes, enabling development teams to identify and address security issues earlier in the lifecycle and securely move applications and capabilities from concept through production.
Location
Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
Salary
$130,000 to $150,000 annually
Essential Duties and Responsibilities:
- Embed cybersecurity engineering into Agile software development and modernization activities.
- Integrate security requirements and controls throughout the SDLC and CI/CD pipelines.
- Apply DevSecOps and shift-left security principles to identify and remediate vulnerabilities earlier in development.
- Implement and support automated security testing within CI/CD workflows.
- Participate with development teams in requirements discussions, design activities, sprint planning, and other lifecycle events.
- Translate RMF, NIST SP 800-53, DoD cybersecurity policy, STIGs, SRGs, and related security requirements into actionable development and engineering tasks.
- Collaborate with developers, architects, system owners, ISSMs, and ISSOs to develop achievable technical security controls before formal assessment.
- Provide threat-informed security engineering guidance for legacy, modernized, and cloud-native applications.
- Support secure development involving APIs, microservices, containerized workloads, and other modern application architectures as applicable.
- Help development teams remediate security vulnerabilities while preserving mission functionality and delivery objectives.
- Provide engineering recommendations for technical controls such as authentication, encryption, network segmentation, and application security.
- Communicate security findings, technical risks, recommended remediation, and implementation approaches to technical and Government stakeholders.
- Manage security-engineering activities across multiple concurrent projects and development sprints.
- Bachelor’s degree and 10+ years of related experience.
- DoD 8140 Work Role 652 – Security Architect Certification requirement (must have at least one of the following): Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, CSSLP, and GSEC.
- Must have and maintain a current DoD Top Secret clearance.
- Must reside within a commutable distance of Fort Meade, MD or Chambersburg, PA in order to work a hybrid onsite schedule (4 days onsite weekly).
- Demonstrated experience integrating cybersecurity into Agile SDLC environments.
- Demonstrated hands-on experience with CI/CD pipelines.
- Practical experience implementing DevSecOps and shift-left security practices.
- Experience using automated security testing tools within software development processes.
- Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53.
- Knowledge and practical application of DoD STIGs and SRGs.
- Ability to convert security/compliance requirements into specific technical development tasks and controls.
- Understanding of modern application architectures and cloud-native development.
- Ability to collaborate effectively with cybersecurity, engineering, architecture, and software-development teams.
- Strong written and verbal communication skills.
- Ability to manage multiple development efforts and sprints in a high-tempo environment.
Who We Are…
Newberry Group is a performance-driven government services and solutions firm that provides security compliance, program governance, consulting, and customized solutions for public sector clients nationwide.
The strength of our company is a direct reflection of our highly skilled and talented workforce.
Benefits and Perks
In addition to competitive wages, Newberry Group offers an outstanding benefit package. This includes medical coverage with three plan options, dental and vision coverage, personal time off, paid holidays, paid parental leave, telecommuting if available, retirement savings accounts (Pre-Tax and Roth), flexible and dependent care savings accounts, life insurance, long and short-term disability coverage, tuition and training reimbursement, employee assistance program, and more.
The Newberry Group, Inc. is an Equal Opportunity Employer – EEO/AA/Disability/Veterans.
Skills Required
- Bachelor's degree
- 10+ years of related experience
- At least one DoD 8140 Work Role 652 Security Architect certification: Security X/CASP+CE, CCSP, Cloud+, CISSP, CSSLP, CISM, CISSP-ISSAP, CISSP-ISSIP, or GSEC
- Current DoD Top Secret security clearance
- Residence within commuting distance of Fort Meade, Maryland, or Chambersburg, Pennsylvania
- Availability for a hybrid schedule with four days onsite weekly
- Experience integrating cybersecurity into Agile SDLC environments
- Hands-on experience with CI/CD pipelines
- Practical experience implementing DevSecOps and shift-left security practices
- Experience using automated security testing tools in software development processes
- Knowledge of RMF, NIST SP 800-37, and NIST SP 800-53
- Practical application of DoD STIGs and SRGs
- Ability to convert security and compliance requirements into technical development tasks and controls
- Understanding of modern application architectures and cloud-native development
- Strong collaboration skills across cybersecurity, engineering, architecture, and software development teams
- Strong written and verbal communication skills
- Ability to manage multiple development efforts and sprints in a high-tempo environment
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Established in 1996, Newberry Group has set out to create something altogether different: meeting the most challenging needs of both Public and Private Sector clients. We achieve this by providing superior services and exceptionally qualified professionals who create a unique experience for our clients in every engagement. Newberry brings strength to our client from the inside out through client intimacy and superior quality, presence and accountability in our relationships, and cross-sector leverage of public and commercial sector best practices.
