Hybrid DevSecOps Security Engineer:CI/CD & Cloud Protection

Leidos; Eagan (MN); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos Inc. is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area within the Homeland Sector.

You will build and operate automated security controls in the L-CAP delivery pipeline, enforce gates, signings, and SBOMs, and drive remediation across Kubernetes and cloud environments. The role emphasizes policy-as-code, continuous security evidence, and collaboration with platform teams.

Qualifications

• Requires 4+ years of relevant DevSecOps security experience.
• Experience integrating SAST/DAST and software composition analysis into CI/CD.
• Experience securing Kubernetes and container environments with hardened images.

Responsibilities

• Build and operate automated security controls in CI/CD pipelines (SAST, DAST, SCA, container scanning).
• Enforce security gates, signing, provenance verification, and SBOMs to prevent vulnerable deployments.
• Drive container vulnerability remediation and baseline hardening of images.
• Implement Kubernetes security controls: pods, network policies, RBAC, admissions, security contexts.
• Secure workloads with secrets management, mTLS, service mesh policies, and hardening.
• Develop policy-as-code and guardrails using OPA/Rego, Kyverno or equivalents.
• Produce security evidence for authorization and continuous monitoring.
• Triage vulnerabilities, remediate findings, and support incident response and root cause analysis.
• Leverage AI-assisted development and modern engineering practices to improve security and delivery speed.

Skills

Bachelor's degree

CI/CD pipelines

Kubernetes security

Vulnerability scanning

Secrets management

Git-based workflows

NIST 800-53

AWS/Azure security

Public Trust readiness

Education

Bachelor's degree in Cybersecurity/CS/IT

Tools

Nessus

Trivy

Grype

Qualys

HashiCorp Vault

GitLab CI

GitHub Actions

Jenkins

ArgoCD

Kubernetes

Job description

Leidos Inc. is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area within the Homeland Sector.

You will build and operate automated security controls in the L-CAP delivery pipeline, enforce gates, signings, and SBOMs, and drive remediation across Kubernetes and cloud environments. The role emphasizes policy-as-code, continuous security evidence, and collaboration with platform teams.