DevSecOps Security Engineer - General Dynamics Information Technology

OpenTalent; United States; On-site; USD 120,000 - 190,000; Full time

Job summary

GDIT is seeking a DevSecOps Security Engineer to architect and automate secure workflows across CI/CD pipelines and compliance operations from a remote U.S. base. The role emphasizes cloud security, automation of ATO artifacts, and integration with Terraform, AWS GovCloud, and modern tooling.

You will mentor engineers, evolve security practices, and drive proactive security posture across a highly automated environment while leveraging Generative AI tools to accelerate development and reporting.

Qualifications

• Architect and automate security workflows across our CI/CD pipeline and compliance operations.
• Partner with development and platform teams to integrate, automate, and monitor security tool components within automated pipelines.
• Build automation for compliance and ATO artifacts, including continuous monitoring reports, SPIAs, and control evidence mapping against NIST 800-53 / 800-171.
• Perform automated inventory delta analysis and drift detection across cloud accounts to maintain an auditable security posture.
• Champion DevSecOps culture by mentoring junior/mid-level engineers, educating teams on modern security tooling, and resolving complex configuration or performance issues.
• Leverage Generative AI engineering tools to accelerate the development of security automation, compliance reporting, and Infrastructure as Code (IaC) scanning workflows.
• Define guidelines and standards for securing AWS Cloud and container environments, implementing advanced solutions for system security, logging, and audit correlation.
• Drive engineering excellence by guiding the preparation of comprehensive technical documentation, processes, and procedures.

Responsibilities

• Architect and automate security workflows across CI/CD and compliance operations.
• Integrate, automate, and monitor security tool components within automated pipelines.
• Create automation for compliance artifacts and evidence mapping.
• Perform automated inventory delta analysis and drift detection across cloud accounts.
• Mentor junior/mid-level engineers on modern security tooling.
• Use Generative AI tools to accelerate security automation and IaC scanning.
• Define guidelines for securing AWS Cloud and containers.
• Prepare technical documentation, processes, and procedures.

Skills

AWS Cloud Computing

CI/CD

DevSecOps

Job description

None

Cyber and IT Risk Management

Remote, Working from the USA

Key Skills For Success

AWS Cloud Computing

CI/CD

DevSecOps

Own your opportunity to work alongside federal civilian agencies. Make an impact by providing services that help the government ensure the well being and support of U.S. citizens.

Job Description

DevSecOps Security Engineer

Help us simplify the complex as a DevSecOps Security Engineer at GDIT, where we tailor advanced cloud security solutions to critical client missions. In this role, your priority will be engineering automated, secure compliance and vulnerability-management workflows for our program, while we focus on supporting your professional growth.

Our work on the AED program depends on a senior security engineer who has managed the security portion of a DevSecOps pipeline operating under a continuous ATO (cATO). You’ll leverage a modern stack, including AWS GovCloud security services, Terraform, and CI/CD pipeline tooling, to shift our security posture from reactive to proactive across a highly secure, automated environment.

HOW A DEVSECOPS SECURITY ENGINEER WILL MAKE AN IMPACT:

• Architect and automate security workflows across our CI/CD pipeline and compliance operations, reducing manual effort in vulnerability scan analysis, security inventory auditing, and continuous monitoring reporting.
• Partner with development and platform teams to integrate, automate, and monitor security tool components (scan ingestion, finding triage, evidence generation) within automated pipelines.
• Build automation for compliance and ATO artifacts, including continuous monitoring reports, SPIAs, and control evidence mapping against NIST 800-53 / 800-171.
• Perform automated inventory delta analysis and drift detection across cloud accounts to maintain an accurate, auditable security posture.
• Champion DevSecOps culture by mentoring junior/mid-level engineers, educating teams on modern security tooling, and resolving complex configuration or performance issues.
• Leverage Generative AI engineering tools (such as Claude, Gemini, Copilot) to accelerate the development of security automation, compliance reporting, and Infrastructure as Code (IaC) scanning workflows.
• Define guidelines and standards for securing AWS Cloud and container environments, implementing advanced solutions for system security, logging, and audit correlation.
• Drive engineering excellence by guiding the preparation of comprehensive technical documentation, processes, and procedures.

WHAT YOU’LL NEED TO SUCCEED:

Technical Expertise: