Hybrid DevSecOps Security Engineer – AI Platform

Leidos; Gaithersburg (MD); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area, supporting L-CAP in a hybrid model (3 onsite/2 remote from Gaithersburg, MD area). The role focuses on building and operating automated security controls within the delivery pipeline, including SAST, DAST, and SBOM governance, to raise security posture without slowing delivery.

You will work with platform and application teams in a SAFe/Agile context, target modern engineering practices, and require a Public

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field with 4+ years of relevant experience.
• Hands‑on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and container environments, including pod security, network policies, RBAC, admission controls, and hardened/minimal base images.
• Experience with vulnerability scanning and remediation using Nessus, Trivy, Grype, or Qualys, including CVE triage and tracking.
• Experience with secrets management (HashiCorp Vault or equivalent) and security automation using Python, Bash, or Go.
• Experience with Git‑based workflows and CI/CD tooling, such as GitLab CI, GitHub Actions, or Jenkins.
• Working knowledge of NIST 800‑53, automated security evidence, and AWS or Azure cloud security.
• Understanding of network security, including segmentation and default‑deny policies.
• U.S. citizenship required, with ability to obtain Public Trust and meet government background investigation requirements.
• FAA facility and information system access requirements, including continuous U.S. residency for at least 3 of the prior 5 years.

Responsibilities

• Build and operate automated security controls in CI/CD pipelines (SAST, DAST, software composition analysis, container scanning).
• Enforce security gates, artifact signing, provenance verification, and SBOMs to prevent deployments.
• Drive container vulnerability remediation and hardening with minimal base images.
• Implement Kubernetes security controls including pod security and RBAC.
• Secure workloads via secrets management, mutual TLS, service mesh policies, and Linux/container hardening.
• Develop policy‑as‑code and infrastructure guardrails using OPA/Rego, Kyverno, or equivalents.
• Produce security evidence supporting authorization and continuous monitoring requirements.
• Triage vulnerabilities, remediate findings, and support security incident response and root cause analysis.
• Leverage AI‑assisted development and modern engineering practices to improve security and delivery speed.

Skills

SAST and DAST integration

Kubernetes security

Secrets management

CI/CD tooling

Vulnerability remediation

Education

Bachelor’s degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

HashiCorp Vault

GitLab CI

GitHub Actions

Jenkins

Job description

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area, supporting L-CAP in a hybrid model (3 onsite/2 remote from Gaithersburg, MD area). The role focuses on building and operating automated security controls within the delivery pipeline, including SAST, DAST, and SBOM governance, to raise security posture without slowing delivery.

You will work with platform and application teams in a SAFe/Agile context, target modern engineering practices, and require a Public