AI-Driven DevSecOps Security Engineer

Leidos; Gaithersburg (MD); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is hiring a DevSecOps Security Engineer to secure the automated pipeline for the Leidos Common Automation Platform (L-CAP). The role supports hybrid cloud, container security, and governance across government programs.

You will implement automated security controls in CI/CD, enforce gates and SBOMs, and drive remediation across Kubernetes and cloud environments. A Public Trust and FAA access are required for US residency. If located remotely, travel may be necessary.

Qualifications

• Bachelor's degree in Cybersecurity, CS, IT or related field with 4+ years of experience.
• Experience integrating SAST/DAST and software composition analysis into CI/CD pipelines.
• Experience securing Kubernetes and container environments with hardened images and RBAC.
• Experience with vulnerability scanning/remediation using Nessus/Trivy/Grype/Qualys.
• Experience with secrets management (Vault or equivalent) and scripting languages (Python/Bash/Go).
• Familiarity with Git-based CI/CD tools (GitLab CI, GitHub Actions, Jenkins).
• Working knowledge of NIST 800-53 and cloud security (AWS/Azure).
• US citizenship with ability to obtain Public Trust clearance and FAA access requirements.

Responsibilities

• Design, implement, and operate automated security controls in CI/CD pipelines (SAST/DAST, SCA, container scanning).
• Enforce security gates, signing, SBOMs, and provenance verification to prevent unverified deployments.
• Drive container vulnerability remediation and hardening, including minimal base images.
• Implement Kubernetes security controls, pod security, network policies, RBAC, and admission controls.
• Secure workloads with secrets management, mTLS, service mesh policies, and container hardening.
• Build policy-as-code and guardrails using OPA/Rego or Kyverno.
• Produce security evidence for authorization and continuous monitoring.
• Collaborate with platform/app teams to triage vulnerabilities and support incident response.
• Leverage AI-assisted development and modern engineering practices to improve security and delivery.

Skills

CI/CD security

Kubernetes security

Vulnerability remediation

Secrets management

Git-based workflows

Cloud security

NIST 800-53

Public Trust readiness

FAA access compliance

Education

Bachelor's degree in Cybersecurity/CS

Tools

Nessus

Trivy

Grype

Qualys

Kubernetes

ArgoCD/Flux

Jenkins/GitHub Actions/GitLab CI

OPA/Rego

Kyverno

HashiCorp Vault

Python/Bash/Go

Job description

Leidos is hiring a DevSecOps Security Engineer to secure the automated pipeline for the Leidos Common Automation Platform (L-CAP). The role supports hybrid cloud, container security, and governance across government programs.

You will implement automated security controls in CI/CD, enforce gates and SBOMs, and drive remediation across Kubernetes and cloud environments. A Public Trust and FAA access are required for US residency. If located remotely, travel may be necessary.