DevSecOps Engineer - Leidos

OpenTalent; Oklahoma City (OK); On-site; USD 90,000 - 130,000; Full time

Job summary

Leidos in Oklahoma City seeks a Mid-Level DevSecOps Engineer to integrate security into the DevOps lifecycle for a DoD program with the Air Force Life Cycle Management Center.

You will automate security in CI/CD, perform vulnerability assessments, threat modeling, incident response, and mentor junior engineers in DevSecOps best practices within a secure, high-paced environment.

Qualifications

• Experience with DoD security standards and practices.
• Bachelor’s degree with 4+ years of experience or Master’s with 2+ years.
• 3–5 years of professional software development experience.
• Strong understanding of software development paradigms and tools (Git/Jira, CI/CD).
• Experience provisioning resources in IaaS/Cloud (Azure/AWS/GCP).
• Experience with container technologies such as Docker and Kubernetes.

Responsibilities

• Support integration of security practices into the DevOps pipeline for DoD applications, ensuring standards compliance.
• Automate security tools and processes within CI/CD to enhance security posture.
• Conduct vulnerability assessments, penetration testing, and threat modeling to identify and remediate issues.
• Collaborate with development and operations to implement secure coding and controls.
• Configure and manage security tools, including SCA, SAST, DAST, and IaC security.
• Participate in incident response activities, monitor alerts, and coordinate with teams.
• Mentor junior team members on DevSecOps best practices and tools.

Skills

DevSecOps

CI/CD

Threat modeling

Vulnerability assessment

Incident response

Secure coding

IaC security

Containerization

Linux administration

Windows administration

Networking

Security tooling

Education

Bachelor's degree

Master's degree

Tools

Jira

GitLab

Terraform

Kubernetes

Docker

Job description

Description

DevSecOps Engineer

Oklahoma City, OK

TS/SCI Clearance

The Defense Sector at Leidos is looking for a DevSecOps Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Mid-Level DevSecOps Engineer will enhance the integration of security practices into our DevOps processes for a large Air Force weapons system program. This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle. The ideal candidate will have experience in DevSecOps practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in DevSecOps within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.

Primary Responsibilities:

• Support the integration of security practices into the DevOps pipeline for DoD applications, ensuring compliance with relevant standards.
• Implement and automate security tools and processes within CI/CD workflows to enhance the security posture of applications.
• Conduct vulnerability assessments, penetration testing, and threat modeling to identify and remediate security issues.
• Collaborate with development and operations teams to establish secure coding practices and implement security controls.
• Configure and manage security tools, including static code analysis, dynamic application security testing, and infrastructure as code (IaC) security.
• Participate in incident response activities, monitoring security alerts and incidents, and coordinating with cross-functional teams.
• Mentor junior team members and provide guidance on DevSecOps best practices and tools.

Basic Qualifications:

• US Citizen with at least an active Top Secret clearance with the ability to obtain and maintain a SCI prior to your start date.
• Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience. Additional experience may be considered in lieu of a degree.
• Three to five years of experience performing or supporting software development activities in a professional capacity.
• Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
• Strong experience with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
• Experience provisioning and managing resources within IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
• Experience with container technologies such as Docker and container orchestration tools like Kubernetes