DevSecOps Security Engineer
General Dynamics Information Technology11 days ago
Remote, WorldwideSenior
Base Salary
$191k - $259k/yr
Responsibilities
- Architect and automate security workflows across CI/CD pipelines and compliance operations.
- Automate vulnerability scan analysis, security inventory auditing, continuous monitoring reporting, and compliance evidence generation.
- Integrate and monitor security tooling for scan ingestion, finding triage, and control evidence mapping.
- Perform inventory delta analysis and drift detection across cloud accounts.
- Define security guidelines and standards for AWS Cloud and container environments, including logging and audit correlation.
- Build and scan Infrastructure as Code for security and compliance.
- Use generative AI engineering tools to accelerate security automation, compliance reporting, and IaC scanning workflows.
- Mentor junior and mid-level engineers, drive technical consensus, and resolve complex configuration or performance issues.
- Prepare technical documentation, processes, and procedures.
Requirements
- BA/BS degree and 8+ years of relevant experience, or an equivalent combination of education and experience.
- Direct hands-on experience managing the security portion of a DevSecOps pipeline in a continuous ATO environment.
- Experience owning automated security gates, control evidence, and compliance posture within a live continuous-authorization pipeline.
- Hands-on experience automating compliance workflows, including scan ingestion, finding triage, evidence generation, and continuous monitoring reporting.
- Experience with AWS GovCloud security services and centralized correlation of findings.
- Experience with Terraform or CloudFormation security scanning and Infrastructure as Code security practices.
- Knowledge of NIST 800-53 or NIST 800-171, FedRAMP, and IAM.
- Strong automation scripting proficiency in Python, Bash, or similar languages.
- Linux/Unix administration experience, preferably with RHEL or CentOS.
- Active Security+ certification or an equivalent DoD 8570/8140 baseline certification.
- Ability to mentor engineers, drive technical consensus, communicate effectively, and solve complex security and compliance problems.
- Preferred qualifications include experience building security products or DevSecOps tooling, continuous monitoring automation, large-scale audit evidence collection, and security analytics platforms such as Databricks.
Benefits
- Remote work from any location with a full-flex work week.
- Comprehensive medical, dental, vision, wellness, disability, life, accident, critical illness, and business travel insurance options.
- 401(k) plan with company matching and pre-tax and post-tax contribution options.
- Paid advanced certifications, higher education, and professional development opportunities.
- Generous paid vacation, sick and personal leave, floating holidays, and 10 paid holidays per year.
- Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees.
- 40 scheduled hours per week and less than 10% travel.