Cyber Security Engineer

SHR Consulting Group, LLC•Alexandria, VA

7d•$130,000 - $150,000•Hybrid

About The Position

The Cybersecurity Engineer provides hands-on cybersecurity engineering and operational security support for enterprise applications and cloud environments. The position works with system owners, security personnel, application teams, DevSecOps engineers, and operations teams to maintain security compliance, identify and remediate vulnerabilities, support continuous monitoring, and protect sensitive information.

Requirements

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, or equivalent relevant experience.
5+ years of cybersecurity engineering, security operations, or information systems security experience.
Experience securing cloud-hosted applications and infrastructure, preferably within Google Cloud Platform (GCP).
Experience with NIST SP 800-53, FISMA, RMF, vulnerability management, continuous monitoring, and security control implementation.
Experience with vulnerability scanning, security monitoring/logging, incident response, and DevSecOps security practices.
Experience supporting security assessments and remediation of identified vulnerabilities.
CompTIA Security+ or equivalent industry-recognized security certification (Required)

Nice To Haves

CISSP, CCSP, Google Cloud security certification, or equivalent certification preferred.
CISSP; CCSP; Google Cloud Professional Cloud Security Engineer; CompTIA CySA+; GIAC certifications (Preferred)

Responsibilities

Provide cybersecurity engineering support across development, testing, staging, and production environments.
Support security of applications and infrastructure hosted within Google Cloud Platform (GCP).
Implement and maintain technical security controls consistent with applicable organizational and federal security requirements.
Support security authorization, assessment, and continuous monitoring activities.
Identify, analyze, track, prioritize, and support remediation of application, infrastructure, cloud, and configuration vulnerabilities.
Review security scan results, assess findings, coordinate remediation with engineering and development teams, and validate corrective actions.
Develop and maintain security artifacts and supporting documentation for identified vulnerabilities and remediation activities.
Integrate automated security testing and security controls into DevSecOps and CI/CD processes.
Support incident response, investigation, containment, remediation, and root cause analysis.
Support security logging, monitoring, alerting, and audit capabilities.
Develop and maintain security documentation and evidence supporting security assessments, audits, releases, and change-control activities.
Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.