Hybrid AI-Driven DevSecOps Engineer – Secure CI/CD & K8s

Leidos; Gaithersburg (MD); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area, supporting the Leidos Common Automation Platform. This hybrid role requires about 3 days onsite and 2 days remote, with potential for 100% remote if not within commutable distance of Gaithersburg, MD.

You will implement automated security controls in CI/CD pipelines and drive enforcement of security gates and SBOMs. You’ll collaborate with platform and application teams to strengthen security posture across

Qualifications

• Bachelor’s degree required with 4+ years of relevant experience; additional experience may be considered in lieu of degree.
• Hands-on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and container environments including pod security and RBAC.
• Experience with vulnerability scanning and remediation using Nessus, Trivy, Grype, or Qualys.
• Experience with secrets management (HashiCorp Vault or equivalent) and security automation using Python, Bash, or Go.

Responsibilities

• Implement and maintain automated security controls in CI/CD pipelines, including SAST, DAST, SCA, container scanning, and IaC scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX).
• Drive container vulnerability remediation and hardening, including base images.
• Implement Kubernetes security controls including pod security, network policies, RBAC, and admission controls.
• Secure workloads through secrets management, mTLS, service mesh policies, and Linux/container hardening.
• Build and maintain policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, or equivalent tools.
• Produce security evidence supporting authorization and continuous monitoring requirements.
• Triage vulnerabilities, remediate findings, and support security incident response and root cause analysis.
• Leverage AI-assisted development, automation, and modern engineering practices to improve security and delivery speed.

Skills

CI/CD security

Kubernetes security

Vulnerability management

Secrets management

Automation scripting

Git-based workflows

Policy enforcement

Cloud security

NIST 800-53

Public Trust readiness

Education

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field

Tools

GitLab CI

GitHub Actions

Jenkins

Job description

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area, supporting the Leidos Common Automation Platform. This hybrid role requires about 3 days onsite and 2 days remote, with potential for 100% remote if not within commutable distance of Gaithersburg, MD.

You will implement automated security controls in CI/CD pipelines and drive enforcement of security gates and SBOMs. You’ll collaborate with platform and application teams to strengthen security posture across