Senior DevSecOps Security Engineer Full-Flex Cloud

General Dynamics Information Technology; Fairfax (VA); On-site; USD 191,000 - 259,000; Full time

Job summary

General Dynamics Information Technology seeks a DevSecOps Security Engineer to automate secure compliance workflows and vulnerability-management in a modern cloud stack. You will work with AWS GovCloud, Terraform, and CI/CD tooling to advance the security posture from reactive to proactive, while mentoring junior engineers and contributing to security documentation and standards.

Strong background in continuous ATO, NIST controls, and IaC security is required in a fast-paced federal contracting

Qualifications

• Direct, hands-on experience managing the security portion of a DevSecOps pipeline in a continuous ATO (cATO) environment.
• BA/BS Degree and 8+ years of relevant experience (or equivalent).
• Hands-on automation of compliance workflows: scan ingestion, evidence generation, and continuous monitoring reporting.
• Experience with AWS GovCloud security services (Security Hub, Inspector, GuardDuty, Config) and centralizing findings; IaC scanning tools also preferred.
• Background in NIST 800-53/800-171 control implementation and evidence mapping; familiarity with FedRAMP and IAM.
• Proficiency in automation scripting (Python, Bash) and Linux administration; active Security+ certification.

Responsibilities

• Architect and automate security workflows across CI/CD pipelines and compliance operations.
• Partner with development and platform teams to integrate, automate, and monitor security tool components.
• Build automation for compliance and ATO artifacts, including continuous monitoring reports and control evidence mapping.
• Perform automated inventory delta analysis and drift detection across cloud accounts to maintain auditable security posture.
• Mentor junior/mid-level engineers and drive adoption of modern security tooling and best practices.
• Define guidelines for securing AWS Cloud and container environments; contribute to technical documentation.

Skills

AWS Cloud Computing

CI/CD

DevSecOps

Education

BA/BS Degree

Job description

General Dynamics Information Technology seeks a DevSecOps Security Engineer to automate secure compliance workflows and vulnerability-management in a modern cloud stack. You will work with AWS GovCloud, Terraform, and CI/CD tooling to advance the security posture from reactive to proactive, while mentoring junior engineers and contributing to security documentation and standards.

Strong background in continuous ATO, NIST controls, and IaC security is required in a fast-paced federal contracting