Hybrid DevSecOps Security Engineer (CI/CD & Kubernetes)

Leidos; Egg Harbor Township (NJ); Hybrid; USD 87,000 - 157,000; Full time

Job summary

Leidos seeks a DevSecOps Security Engineer to build automated security controls within the L-CAP delivery pipeline, aligning with a SAFe/Agile framework. You will reinforce gates, artifact signing, SBOMs, and vulnerability remediation across CI/CD and container environments to ensure continuous security without slowing delivery.

The role requires strong scripting, cloud security experience (AWS/Azure), and FAA/Public Trust readiness, with a hybrid work model available for commutable locations.

Qualifications

• Bachelor’s degree in Cybersecurity, CS, IT or related field with 4+ years of relevant experience.
• Experience integrating SAST/DAST, software composition analysis, and container scanning into CI/CD pipelines.
• Experience securing Kubernetes and container environments with hardened images and RBAC.
• Experience with vulnerability scanning and remediation using Nessus/Trivy/Grype/Qualys.
• Experience with secrets management (HashiCorp Vault or equivalent) and security automation using Python, Bash, or Go.
• Familiarity with Git-based workflows and CI/CD tooling (GitLab CI, GitHub Actions, Jenkins).
• Working knowledge of NIST 800-53 and cloud security (AWS or Azure).
• US citizenship with ability to obtain Public Trust; FAA facility access requirements.

Responsibilities

• Build and operate automated security controls in CI/CD pipelines, including SAST/DAST, SCA, and container scanning.
• Enforce security gates, artifact signing, provenance verification, and SBOMs to prevent unverified deployments.
• Drive container vulnerability remediation and hardening with minimal base images.
• Implement Kubernetes security controls: pod security, network policies, RBAC, and security contexts.
• Secure workloads with secrets management, mutual TLS, service mesh policies, and hardening.
• Develop policy-as-code and infrastructure guardrails using OPA/Rego or Kyverno.
• Produce security evidence for authorization and continuous monitoring; support incident response.

Skills

CI/CD Security

Kubernetes Security

Vulnerability Scanning

Secrets Management

Python

GitOps/CI

Education

Bachelor’s degree

Tools

Nessus

Trivy

Grype

Qualys

Job description

Leidos seeks a DevSecOps Security Engineer to build automated security controls within the L-CAP delivery pipeline, aligning with a SAFe/Agile framework. You will reinforce gates, artifact signing, SBOMs, and vulnerability remediation across CI/CD and container environments to ensure continuous security without slowing delivery.

The role requires strong scripting, cloud security experience (AWS/Azure), and FAA/Public Trust readiness, with a hybrid work model available for commutable locations.