[Remote] DevSecOps Security Engineer

Note: The job is a remote job and is open to candidates in USA. GDIT is a global technology and professional services company delivering technology solutions and mission services to government, defense, and intelligence customers. The DevSecOps Security Engineer will engineer automated security, compliance, and vulnerability-management workflows for a continuous ATO environment using AWS GovCloud, Terraform, and CI/CD tooling. The role also partners with development and platform teams, mentors engineers, and supports security automation, monitoring, evidence generation, and audit readiness.

Responsibilities

• Architect and automate security workflows across our CI/CD pipeline and compliance operations, reducing manual effort in vulnerability scan analysis, security inventory auditing, and continuous monitoring reporting
• Partner with development and platform teams to integrate, automate, and monitor security tool components (scan ingestion, finding triage, evidence generation) within automated pipelines
• Build automation for compliance and ATO artifacts, including continuous monitoring reports, SPIAs, and control evidence mapping against NIST 800-53 / 800-171
• Perform automated inventory delta analysis and drift detection across cloud accounts to maintain an accurate, auditable security posture
• Champion DevSecOps culture by mentoring junior/mid-level engineers, educating teams on modern security tooling, and resolving complex configuration or performance issues
• Leverage Generative AI engineering tools (such as Claude, Gemini, Copilot) to accelerate the development of security automation, compliance reporting, and Infrastructure as Code (IaC) scanning workflows
• Define guidelines and standards for securing AWS Cloud and container environments, implementing advanced solutions for system security, logging, and audit correlation
• Drive engineering excellence by guiding the preparation of comprehensive technical documentation, processes, and procedures

Skills

• AWS Cloud Computing, CI/CD, DevSecOps
• 8 + years of related experience
• Yes
• Direct, hands-on experience managing the security portion of a DevSecOps pipeline in a continuous ATO (cATO) environment. Candidates must have owned automated security gates, control evidence, and compliance posture within a live continuous-authorization pipeline, not point-in-time ATO or general DevOps exposure
• BA/BS Degree and 8+ years of relevant experience (or an equivalent combination of education and experience)
• Hands-on automation of compliance workflows: scan ingestion, finding triage, evidence generation, and continuous monitoring reporting
• Familiarity with AWS GovCloud security services (Security Hub, Inspector, GuardDuty, Config) and centralizing/correlating their findings, along with scanning and monitoring tooling such as Qualys, CrowdStrike, Nexus/Sonatype, SonarQube, and Datadog
• Experience building and scanning IaC (Terraform, CloudFormation) for security and compliance
• Background in NIST 800-53 or 800-171 control implementation and evidence mapping; familiarity with FedRAMP and IAM
• Active Security+ Certification (or equivalent DoD 8570/8140 baseline)
• Demonstrated capability or strong desire to mentor junior/mid-level engineers, drive technical consensus, and serve as a technical anchor for the team
• Exceptional critical thinking skills with a proven track record of delivering simple, elegant solutions to highly complex security and compliance problems
• Highly effective communication and collaboration skills, with the ability to bridge technical concepts between development teams and program stakeholders
• A strong commitment to continuous learning, engineering best practices, and driving process improvements
• Less than 10%
• Remote
• Any Location / Remote
• Prior experience at a company that builds security products or DevSecOps tooling for software development, with a focus on cyber automation
• Experience with continuous monitoring automation and proactive compliance posture management
• Experience supporting a security audit cadence and evidence collection at scale
• Exposure to security analytics platforms (e.g., Databricks) for correlating and analyzing security telemetry at scale
• Strong proficiency in automation scripting (Python, Bash, or similar) for building internal security tooling; Linux/Unix administration (RHEL or CentOS preferred)

Benefits

• Full-flex work week
• Comprehensive health, dental, vision, and wellness packages
• 401(k) program with a competitive company match
• Paid advanced certifications
• Higher education support
• Dedicated professional growth opportunities
• Internal career mobility support from a dedicated internal talent team
• Generous paid vacation
• Floating holidays
• Medical plan options, some with Health Savings Accounts
• Dental plan options
• 401(k) plan allowing pre-tax and post-tax contributions up to IRS annual limits with a company match
• Paid time off plans, including vacation, sick, personal time, and holidays
• Paid parental leave
• Military leave
• Bereavement leave
• Jury duty leave
• Typically 15 days of paid leave per calendar year for vacations, personal business, and illness
• An additional 10 paid holidays per year
• Up to 160 hours of paid family leave in a rolling 12-month period for eligible employees
• Short- and long-term disability benefits
• Life insurance
• Accidental death and dismemberment insurance
• Personal accident insurance
• Critical illness insurance
• Business travel and accident insurance
• Remote work option

Company Overview