CyberSecurity Engineer; Public Trust Clearance

SHR Consulting Group, LLC is a small business delivering enterprise IT, cybersecurity, and program management services to the Department of Defense and federal civilian agencies. We support mission-critical infrastructure at the Pentagon and across the National Capital Region, and we invest in our people through competitive compensation, professional certification support, and long-term career growth on stable, multi-year programs.

SHR Consulting Group is seeking a Cybersecurity Engineer to provide hands‑on cybersecurity engineering and operational security support for enterprise applications and cloud environments. The position works with system owners, security personnel, application teams, Dev Sec Ops  engineers, and operations teams to maintain security compliance, identify and remediate vulnerabilities, support continuous monitoring, and protect sensitive information. This position supports FEMA and requires DHS EOD Public Trust Clearance prior to start.

Work location is remote, but candidates local to the DC Metro Area is highly preferred for occasional onsite meetings and team collaboration in DC and Bluemont, VA.

• Provide cybersecurity engineering support across development, testing, staging, and production environments.
• Support security of applications and infrastructure hosted within Google Cloud Platform (GCP).
• Implement and maintain technical security controls consistent with applicable organizational and federal security requirements.
• Support security authorization, assessment, and continuous monitoring activities.
• Identify, analyze, track, prioritize, and support remediation of application, infrastructure, cloud, and configuration vulnerabilities.
• Review security scan results, assess findings, coordinate remediation with engineering and development teams, and validate corrective actions.
• Develop and maintain security artifacts and supporting documentation for identified vulnerabilities and remediation activities.
• Integrate automated security testing and security controls into Dev Sec Ops and CI/CD processes.
• Support incident response, investigation, containment, remediation, and root cause analysis.
• Support security logging, monitoring, alerting, and audit capabilities.
• Develop and maintain security documentation and evidence supporting security assessments, audits, releases, and change‑control activities.
• Protect PII, sensitive information, and system data from unauthorized access, disclosure, modification, or loss.
• Participate in Agile/SAFe planning, sprint activities, technical working sessions, and security reviews.

• Five 5+ years of cybersecurity engineering, security operations, or information systems security experience.
• Experience securing cloud‑hosted applications and infrastructure, preferably within Google Cloud Platform (
  GCP
  ).
• Experience with NIST SP 800-53,
  FISMA
  , RMF, vulnerability management, continuous monitoring, and security control implementation.
• Experience with vulnerability scanning, security monitoring/logging, incident response, and Dev Sec Ops  security practices.
• Experience supporting security assessments and remediation of identified vulnerabilities.

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Engineering, or related field, or equivalent relevant experience.
• CompTIA Security+ CE or equivalent industry‑recognized security certification (Required).
• CISSP, CCSP, Google Cloud security certification, or equivalent certification (Highly Preferred).

• DHS EOD Public Trust Clearance (
  FEMA Preferred)
• Remote.
• Candidates residing in the DC Metro Area preferred.
• Competitive salary commensurate with experience and clearance level
• Comprehensive…