DevSecOps Security Engineer - AI-Driven Cloud Security

Leidos; Egg Harbor Township (NJ); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area within the Homeland Sector, supporting the L-CAP platform. This role emphasizes automated security controls in the delivery pipeline and requires the ability to obtain a Public Trust clearance for government programs.

The position is hybrid, with responsibilities across security gating, SBOMs, and vulnerability remediation in a SAFe/Agile environment.

Qualifications

• In-depth knowledge of CI/CD security controls and governance.
• Experience securing Kubernetes and container environments.
• Proficient in vulnerability scanning and remediation.
• Experience with secrets management and security automation.
• Familiarity with cloud security (AWS or Azure) and NIST controls.

Responsibilities

• Implement and maintain automated security controls in CI/CD pipelines, including SAST, DAST, SCA, container scanning, and IaC scanning.
• Enforce security gates, signing, provenance verification, and SBOMs to prevent risky deployments.
• Lead container remediation and hardening, aiming for minimal base images and reduced findings.
• Apply Kubernetes security controls: pod security, network policies, RBAC, and admission controls.
• Secure workloads with secrets management, mTLS, service mesh policies, and hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego or Kyverno.
• Produce security evidence supporting authorization and continuous monitoring needs.
• Collaborate with teams to triage vulnerabilities and support incident response.
• Leverage AI-assisted development and modern practices to improve security and delivery speed.

Skills

CI/CD security integration

Kubernetes security

Vulnerability scanning

Secrets management

Git-based workflows

NIST 800-53 knowledge

Public Trust readiness

Python/Bash/Go scripting

Education

Bachelor’s degree in Cybersecurity, CS, IT, or related field

Tools

Nessus

Trivy

Grype

Qualys

GitLab CI

GitHub Actions

Jenkins

Job description

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area within the Homeland Sector, supporting the L-CAP platform. This role emphasizes automated security controls in the delivery pipeline and requires the ability to obtain a Public Trust clearance for government programs.

The position is hybrid, with responsibilities across security gating, SBOMs, and vulnerability remediation in a SAFe/Agile environment.