AI-Driven DevSecOps Security Engineer (Hybrid)

Leidos LLC; Gaithersburg (MD); Hybrid; USD 87,000 - 157,000; Full time

Benefits offered by this job

Health benefits

Paid leave

Retirement plan

Job summary

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area, supporting the Leidos Common Automation Platform (L-CAP) within a SAFe/Agile framework. The role is hybrid—3 days onsite, 2 days remote for commutable distances; remote options possible for non-commutable locations.

You will build and operate automated security controls in the delivery pipeline, enabling continuous security without delaying delivery.

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
• Hands-on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and container environments with hardened base images and RBAC.
• Experience with vulnerability scanning tools (Nessus, Trivy, Grype, Qualys) and CVE tracking.
• Secrets management and security automation using Python, Bash, or Go.
• Git-based workflows and CI/CD tooling (GitLab CI, GitHub Actions, Jenkins).
• Knowledge of NIST 800-53 and cloud security (AWS/Azure).
• Citizenship required with ability to obtain Public Trust; FAA facility access knowledge.

Responsibilities

• Implement and maintain automated security controls in CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Enforce gates, signing, provenance verification, and SBOMs to prevent unverified deployments.
• Drive container vulnerability remediation and image hardening.
• Implement Kubernetes security controls (pod security, network policies, RBAC, admission controls).
• Secure workloads via secrets management and mTLS/service mesh policies.
• Develop policy-as-code and guardrails with OPA/Rego, Kyverno.
• Produce security evidence for authorization and continuous monitoring.
• Collaborate with teams to triage vulnerabilities and support incident response.

Skills

CI/CD security

SAST/DAST

Kubernetes security

SBOMs

Secrets management

OPA/Rego

Git workflows

Public Trust

FAA requirements

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

HashiCorp Vault

Job description

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area, supporting the Leidos Common Automation Platform (L-CAP) within a SAFe/Agile framework. The role is hybrid—3 days onsite, 2 days remote for commutable distances; remote options possible for non-commutable locations.

You will build and operate automated security controls in the delivery pipeline, enabling continuous security without delaying delivery.