Development Security Operations Engineer

Consulting Services Group (CSG) is a premier provider of support services, bringing a new and unique level of subject matter expertise to our clients. Our innovation-led services provides comprehensive solutions to our clients who face high-stake challenges related to managing essential programs, growth and transformation, critical communications, and logistics. Our people bring unparalleled expertise and dedication and we are always looking to expand our team.

Consulting Services Group (CSG) seeks a dedicated, highly skilled Development Security Operations Engineer to work in a dynamic environment and provide security guidance to our development teams. This is a hands-on position that requires a self-motivated and organized individual to communicate and manage medium and larger projects across multiple platforms and differing environments.

Duties/Tasks and Responsibilities:

• Works on assignments requiring considerable judgment and initiative. Develop solutions to routine technical problems of limited scope, creating detailed instruction for others.
• Threat Detection & Prevention - Monitor networks, analyze cyber threats, and respond to attacks.
• Secure Development (DevSecOps) - Embed security into CI/CD pipelines, automate testing, and prevent vulnerabilities.
• Cloud & On-Premises Security - Safeguard AWS, Azure, Google Cloud environments alongside on-premises Windows and Linux hosts.
• Incident Response & Forensics - Investigate breaches, mitigate risks, and recover compromised systems.
• Compliance & Risk Management - Ensure adherence to security regulations (GDPR, NIST, ISO 27001).
• Integrating security features in the software development life cycle
• Strong understanding of security concepts, including threat modeling, risk assessment, and vulnerability management.
• Knowledge of the SDLC (Software Development Lifecycle) and experience integrating security best practices at every process stage.
• Familiarity with automation tools and scripting languages like Python and PowerShell.
• Understanding cloud security principles, including secure architecture design and configuration management.
• Knowledge of container security principles, such as Docker and Kubernetes.
• Experience with DevOps practices, such as continuous integration and delivery (CI/CD) and infrastructure as code (IAC).
• Experience with various compliance frameworks and regulations: PCI-DSS, HIPAA, and GDPR.
• Good analytical problem-solving skills to scrutinize and solve very intricate security problems with effective solutions.
• Ability to work cohesively with cross-functional teams and possess good communication skills.
• Passionate about continued learning and being aware of current security trends and technologies.

Minimum Qualifications:

• Must be a U.S. Citizen
• Must be willing to submit for and obtain DOD/Secret clearance at minimum
• Must have 3-5 years of experience with "Responsibilities" and "Qualifications" listed herein; range depends on completed education and/or certifications
• Strong understanding of security concepts, including threat modeling, risk assessment, and vulnerability management.
• Knowledge of the SDLC (Software Development Lifecycle) and experience integrating security best practices at every process stage.
• Familiarity with automation tools and scripting languages like Python and PowerShell.
• Understanding cloud security principles, including secure architecture design and configuration management.
• Knowledge of container security principles, such as Docker and Kubernetes.
• Experience with DevOps practices, such as continuous integration and delivery (CI/CD) and infrastructure as code (IAC).
• Experience with various compliance frameworks and regulations: PCI-DSS, HIPAA, and GDPR.
• Good analytical problem-solving skills to scrutinize and solve very intricate security problems with effective solutions.
• Ability to work cohesively with cross-functional teams and possess good communication skills.
• Passionate about continued learning and being aware of current security trends and technologies.

Education:

Desired Qualifications:

1-3 Years of Experience working with:

• Jenkins
• GitLab/Github/Bitbucket
• Docker
• Kubernetes
• Ansible
• Terraform
• Trivy/Grype/Synk
• Harbor/Nexus/Artifactory

Other:

Work:

• Work is typically performed in an office and/or data center environment, requiring computer terminals and standard office equipment to accomplish work objectives. Ability to lift up to 25 lbs.
• This is a full-time position working normal workday hours, Monday to Friday, with weekends and holidays off.

Travel:

Job location: Onsite in Herndon, Virginia. Remote telework is not available.

Compensation and Benefits:

We provide compensation commensurate with experience and qualifications.

We are proud of the benefits that we offer! In addition to a competitive salary, we provide no cost health, dental, and vision insurance options for our employees. Our paid time off is a generous accrual program with additional time off for sick leave for you or your dependents wellbeing and paid military leave. Our 14 holidays allow our staff the flexibility to take alternative days off throughout the year. Employees also benefit from a retirement plan with immediate match and vesting. Additionally, we offer life and disability insurance, tuition reimbursement, and a rich employee referral program.

We are honored to have been recognized as a USA TODAY Top Workplace for 2025. The strong culture that we have built - one that prioritizes work life balance, employee appreciation, strong values, and meaningful work, contributes to an environment where CSG employees feel valued and supported.

Application:

Please let us know if you require accommodations during the application or interview process by reaching us at 540-751-3215.

Consulting Services Group, LLC is an Affirmative Action and Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, national origin, or protected veteran status and will not be discriminated against on the basis of disability. For more information, see Equal Employment Opportunity. We recognize that people come with a wealth of experience and talent beyond just the technical requirements of a job, therefore our job descriptions are guidelines, not hard and fast rules. Your experience helps build the competencies and knowledge that translates to our openings