Hybrid DevSecOps Engineer: AI-Driven Cloud Security

Leidos

Eagan (MN)

Hybrid

USD 87,000 - 157,000

Full time

3 days ago

Be an early applicant

Application generator

Stand out for this role — generate a tailored resume and cover letter in about a minute.

Get past ATS filters

Job summary

Leidos seeks a DevSecOps Security Engineer to join the Air Traffic Business Area within the Homeland Sector, supporting the Leidos Common Automation Platform (L-CAP) in a hybrid cloud data mesh environment.

The role focuses on automated security controls in the delivery pipeline, CI/CD gates, and evidence for security authorization, collaborating with platform and application teams to raise security posture and delivery velocity.

Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field; 4+ years of relevant experience.
Hands‑on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
Experience securing Kubernetes and container environments with hardened/minimal base images.
Experience with vulnerability scanning and remediation using Nessus, Trivy, Grype, or Qualys, including CVE triage.
Experience with secrets management (HashiCorp Vault or equivalent) and security automation using Python, Bash, or Go.
Experience with Git-based workflows and CI/CD tooling (GitLab CI, GitHub Actions, Jenkins).
Working knowledge of NIST 800-53, automated security evidence, and AWS or Azure cloud security.
Understanding of network security, segmentation, and default-deny policies.
U.S. citizenship required with ability to obtain Public Trust; FAA facility and information system access requirements (residency).

Responsibilities

Implement and maintain automated security controls in CI/CD pipelines (SAST, DAST, software composition analysis, container scanning).
Enforce security gates, artifact signing, provenance verification, and SBOMs to prevent vulnerable deployments.
Drive container vulnerability remediation and hardening with minimal base images.
Implement Kubernetes security controls including pod security and RBAC.
Secure workloads via secrets management, mTLS, service mesh policies, and Linux/container hardening.
Build policy-as-code and infrastructure guardrails using OPA/Rego, Kyverno, etc.
Produce security evidence to support authorization and continuous monitoring.
Triage vulnerabilities, remediate findings, and support incident response and root cause analysis.
Leverage AI-assisted development and modern engineering practices to improve security and delivery speed.