Hybrid DevSecOps Security Engineer for AI-First Platform

Leidos Inc

Egg Harbor Township (NJ)

Hybrid

USD 87,000 - 157,000

Full time

5 days ago

Be an early applicant

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

Leidos is seeking a DevSecOps Security Engineer to join the Air Traffic Business Area within the Homeland Sector, supporting the Leidos Common Automation Platform (L-CAP). This role focuses on building automated security controls in the delivery pipeline to ensure continuous security without slowing delivery.

You will enforce gates, sign artifacts, and drive vulnerability remediation while collaborating with platform and application teams.

Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field with 4+ years of relevant experience.
Hands-on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
Experience securing Kubernetes and container environments, including pod security, network policies, RBAC, and hardened images.
Experience with vulnerability scanning and remediation using Nessus, Trivy, Grype, or Qualys, including CVE triage.
Experience with secrets management (HashiCorp Vault) and security automation using Python, Bash, or Go.
Experience with Git-based workflows and CI/CD tooling (GitLab CI, GitHub Actions, Jenkins).
Working knowledge of NIST 800-53 and AWS or Azure cloud security.
U.S. citizenship required, with ability to obtain and maintain a Public Trust and meet government background requirements.
Must meet FAA facility and information system access requirements, including continuous U.S. residency for at least 3 of the prior 5 years.

Responsibilities

Implement and maintain automated security controls in CI/CD pipelines (SAST, DAST, SBOMs).
Enforce security gates, artifact signing, and provenance verification.
Drive container vulnerability remediation and hardening.
Implement Kubernetes security controls (pod security, network policies, RBAC).
Secure workloads with secrets management, mTLS, and service mesh policies.
Build policy-as-code and infrastructure guardrails (OPA/Rego, Kyverno).
Produce security evidence supporting authorization and monitoring requirements.
Triage vulnerabilities, remediate findings, and support incident response.
Leverage AI-assisted development to improve security and delivery speed.