DevSecOps Security Engineer

What you'll do

• Architect and automate security workflows within CI/CD pipelines to reduce manual effort in vulnerability analysis and monitoring.
• Integrate and monitor security tool components, including scan ingestion and finding triage, into automated pipelines.
• Build automation for compliance artifacts and evidence mapping against NIST 800-53 and 800-171 standards.
• Perform automated inventory delta analysis and drift detection across cloud accounts to maintain an auditable posture.
• Utilize Generative AI tools to accelerate the development of security automation and Infrastructure as Code scanning.
• Define security standards for AWS Cloud and container environments, including logging and audit correlation.
• Mentor junior engineers and provide technical guidance on modern security tooling and complex configurations.
• Develop comprehensive technical documentation, processes, and procedures to ensure engineering excellence.

What we're looking for

• US Citizenship is required.
• Must have a BI Full 6C (T4) public trust.
• BA/BS degree and 8+ years of relevant experience are required.
• Active Security+ Certification or equivalent DoD 8570/8140 baseline is required.
• Required hands-on experience managing the security portion of a DevSecOps pipeline in a continuous ATO (cATO) environment.
• Proficiency in automation scripting (Python, Bash), Linux/Unix administration, and Infrastructure as Code (Terraform, CloudFormation).
• Experience with AWS GovCloud services, NIST 800-53 or 800-171 standards, and security tools like Qualys, CrowdStrike, or Datadog.
• Prior experience in cyber automation, proactive compliance management, or using analytics platforms like Databricks (preferred).