Senior DevSecOps Security Engineer - Remote

General Dynamics Information Technology; United States; On-site; USD 191,000 - 259,000; Full time

Benefits offered by this job

Flexible work week

Health benefits

401(k) match

Paid time off

Job summary

General Dynamics Information Technology is seeking a DevSecOps Security Engineer to automate and secure CI/CD pipelines, ensure continuous ATO readiness, and integrate cloud security tooling across AWS GovCloud and on-prem systems. You will help shift security posture from reactive to proactive in a highly automated environment.

The role emphasizes building evidence-backed artifacts, automation of compliance, and mentoring teams in modern security tooling and practices.

Qualifications

• Direct, hands-on experience managing the security portion of a DevSecOps pipeline in a continuous ATO (cATO) environment.
• BA/BS Degree and 8+ years of relevant experience or equivalent.
• Automation of compliance workflows: scan ingestion, finding triage, evidence generation, and continuous monitoring reporting.
• Experience with AWS GovCloud security services and centralizing findings; familiarity with scanning/monitoring tools.

Responsibilities

• Architect and automate security workflows across our CI/CD pipeline and compliance operations.
• Integrate, automate, and monitor security tool components within automated pipelines.
• Build automation for compliance and ATO artifacts, including continuous monitoring reports, SPIAs, and control evidence mapping.

Skills

DevSecOps

Automation scripting

Python

Linux administration

AWS GovCloud

Security+ Cert

Education

BA/BS Degree

Tools

Terraform

CI/CD tooling

Qualys

CrowdStrike

Nexus/Sonatype

SonarQube

Datadog

Job description

General Dynamics Information Technology is seeking a DevSecOps Security Engineer to automate and secure CI/CD pipelines, ensure continuous ATO readiness, and integrate cloud security tooling across AWS GovCloud and on-prem systems. You will help shift security posture from reactive to proactive in a highly automated environment.

The role emphasizes building evidence-backed artifacts, automation of compliance, and mentoring teams in modern security tooling and practices.