Remote DevSecOps Engineer: Secure CI/CD & AppSec Lead

Leidos; Virginia; On-site; USD 87,000 - 157,000; Full time

Job summary

Leidos is seeking an embedded DevSecOps Engineer to proactively identify and remediate security risks across the software development lifecycle. You will partner with project managers, development, architecture, and operations to align security with program priorities and delivery timelines.

You will perform code reviews, integrate security tooling into CI/CD pipelines, coordinate vulnerability remediation, and promote secure coding practices while supporting incident response and risk reporting

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, or related field; 5+ years of experience or equivalent.
• Hands-on application security experience in a software development environment.
• Experience integrating security into CI/CD pipelines and DevSecOps workflows.
• Experience coordinating vulnerability remediation with development teams.
• Knowledge of secure SDLC and security incident response.

Responsibilities

• Analyze designs and architectures to identify security risks and suggest secure patterns.
• Perform manual and automated code reviews to guide remediation.
• Integrate security tools within CI/CD pipelines for continuous testing.
• Coordinate vulnerability remediation and triage with teams.
• Support secure coding practices and provide guidance and training.
• Assist in incident response and track risk posture for reviews.

Skills

Application security

CI/CD security integration

Vulnerability management

Secure SDLC

Incident response

Security communication

Cross-functional collaboration

DevSecOps with Agile

US Citizenship

Education

Bachelor's degree in Cybersecurity/CS or related field

Tools

SAST tools

DAST tools

SCA tools

CI/CD tooling

Job description

Leidos is seeking an embedded DevSecOps Engineer to proactively identify and remediate security risks across the software development lifecycle. You will partner with project managers, development, architecture, and operations to align security with program priorities and delivery timelines.

You will perform code reviews, integrate security tooling into CI/CD pipelines, coordinate vulnerability remediation, and promote secure coding practices while supporting incident response and risk reporting