DevSecOps Engineer

Leidos; Lorton (VA); Presencial; USD 87.000 - 157.000; Jornada completa

Descripción de la vacante

Leidos is seeking a mid‑level DevSecOps Engineer to strengthen security in the DoD software lifecycle for a large Air Force program. The candidate will automate security in CI/CD, perform threat modeling, and drive secure coding practices across development and operations teams.

The role requires an active TS/SCI clearance and hands‑on experience with Docker, Kubernetes, Terraform, and cloud platforms. Opportunities exist to mentor peers and advance in a dynamic defense environment.

Formación

• US Citizen with an active Top Secret clearance and ability to obtain SCI prior to start date.
• Bachelor’s degree with 4+ years of related experience or Master’s with 2+ years of experience.
• 3–5 years of experience in software development activities or related roles.
• Strong understanding of software development paradigms and supporting technologies (e.g., change management, version control, CI/CD, Jira/GitLab).
• Experience with Linux and Windows, networking basics, and cloud provisioning (IaaS).

Responsabilidades

• Support the integration of security practices into the DevOps pipeline for DoD applications, ensuring compliance with standards.
• Implement and automate security tools and processes within CI/CD workflows.
• Conduct vulnerability assessments, penetration testing, and threat modeling to identify and remediate security issues.
• Collaborate with development and operations teams to establish secure coding practices and controls.
• Configure and manage security tools including SAST, DAST, IAST, and IaC security.
• Participate in incident response, monitoring alerts and coordinating with cross-functional teams.
• Mentor junior team members on DevSecOps best practices and tools.

Conocimientos

DevSecOps practices

CI/CD

Jira or GitLab

Linux/Windows

Security tooling

Incident response

Educación

Bachelor's degree

Master's degree

Herramientas

Docker

Kubernetes

Terraform

Ansible

Cloud platforms (AWS/Azure/GCP)

Descripción del empleo

Description

DevSecOps Engineer

Oklahoma City, OK or Lorton, VA

TS/SCI Clearance

The Defense Sector at Leidos is looking for a DevSecOps Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Mid-Level DevSecOps Engineer will enhance the integration of security practices into our DevOps processes for a large Air Force weapons system program. This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle. The ideal candidate will have experience in DevSecOps practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in DevSecOps within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.

Primary Responsibilities

• Supportthe integration of security practices into the DevOps pipeline for DoD applications, ensuring compliance with relevant standards.
• Implement and automate security tools and processes within CI/CD workflows to enhance the security posture of applications.
• Conduct vulnerability assessments, penetration testing, and threat modeling toidentifyand remediate security issues.
• Collaborate with development and operations teams toestablishsecure coding practices and implement security controls.
• Configure and manage security tools, including static code analysis, dynamic application security testing, and infrastructure as code (IaC) security.
• Participate in incident response activities, monitoring security alerts and incidents, and coordinating with cross-functional teams.
• Mentor junior team members and provide guidance onDevSecOpsbest practices and tools.

Basic Qualifications

• US Citizen with at least an active Top Secret clearance with the ability to obtain and maintain a SCI prior to your start date.
• Bachelor’s degree with 4+ years of experience or aMaster’sdegree with 2+ years of experience.Additionalexperience may be considered in lieu of a degree.
• Three to five years of experience performingor supportingsoftware developmentactivities in a professional capacity.
• Strong understanding of software development paradigms andsupportingtechnologies (e.g.change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
• Strong experience with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
• Experience provisioning and managing resources within IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
• Experience with container technologies such as Docker and container orchestration tools like Kubernetes
• Experience with automated provisioning and configuration tools like Terraform, CloudFormation, Chef, Puppet,Ansibleor similar technologies
• Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs.
• Self-starter thatis able towork independently whilepossessingthe communication skills to work effectively with software development teams and customers.
• Excellent interpersonal,verbaland written communication skills.

Preferred Qualifications

• Experience with Air Force Life Cycle Management Centerprograms.
• DoD 8570 IAM Level II certification or higher(e.g.CASP, CISM, CISSP)or DoD 8140 Advanced certifications
• Intermediate or better cloud certifications such asMicrosoft Certified: Azure Solutions Architect Expert or similar certificationfrom another cloud provider.
• Experience with security tools and practices related toDevSecOps(e.g., SAST, DAST, IAST).
• Experience with compliance standards (e.g., OWASP, NIST) and DoD regulations.
• Understanding ofKeycloakadministration.
• Experience using Helm todeploy tools.
• 1-2 years of experience performing Configuration Management activities in a professional capacity related to software development.
• 3-5 years of experience performingDevSecOpsactivities in a professional capacity.
• Interest in continuous learning and professional development in cybersecurity and DevOps practices.

DABAOPP1

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers.

• Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement.

More details are available at www.leidos.com/careers/pay-benefits.

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [e-mail].

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.