DevSecOps Security Engineer

Type of Requisition: Regular Clearance Level Must Currently Possess: None Clearance Level Must Be Able to Obtain: None Public Trust/Other Required: BI Full 6C (T4) Job Family: Cyber and IT Risk Management Job Qualifications: Skills: AWS Cloud Computing, CI/CD, DevSecOps Certifications: None Experience: 8 + years of related experience US Citizenship Required: Yes Job Description: DevSecOps Security Engineer Help us simplify the complex as a DevSecOps Security Engineer at GDIT, where we tailor advanced cloud security solutions to critical client missions.

In this role, your priority will be engineering automated, secure compliance and vulnerability-management workflows for our program, while we focus on supporting your professional growth.

Our work on the AED program depends on a senior security engineer who has managed the security portion of a DevSecOps pipeline operating under a continuous ATO (cATO).

You’ll leverage a modern stack, including AWS GovCloud security services, Terraform, and CI/CD pipeline tooling, to shift our security posture from reactive to proactive across a highly secure, automated environment.

HOW A DEVSECOPS SECURITY ENGINEER WILL MAKE AN IMPACT: Architect and automate security workflows across our CI/CD pipeline and compliance operations, reducing manual effort in vulnerability scan analysis, security inventory auditing, and continuous monitoring reporting.

Partner with development and platform teams to integrate, automate, and monitor security tool components (scan ingestion, finding triage, evidence generation) within automated pipelines.

Build automation for compliance and ATO artifacts, including continuous monitoring reports, SPIAs, and control evidence mapping against NIST 800-53 / 800-171. Perform automated inventory delta analysis and drift detection across cloud accounts to maintain an accurate, auditable security posture.

Champion DevSecOps culture by mentoring junior/mid-level engineers, educating teams on modern security tooling,