Senior DevSecOps Engineer

The Defense Sector at Leidos is currently seeking an experienced Senior DevSecOpsEngineerfor one of ourAir Force Life Cycle Management Center role is critical inestablishingrobust security practices throughout the software development lifecycle and ensuring compliance with stringent security standards. The ideal candidate will have extensive experience inDevSecOps strong leadership abilities and a commitment to fostering a culture of security within the position offers an exciting opportunity to shapethe security landscape ofan Air Forceprogram ensuring the secure development of software in a dynamic and innovative environment.

Primary Responsibilities:

• Lead the design and implementation of security practices within the DevOps pipeline for DoD applications ensuring alignment with regulatory requirements.
• Evaluate and select security tools integrating them into CI/CD workflows to enhance application security.
• Conduct advanced vulnerability assessments threat modeling and penetration testing to proactivelyidentifyand mitigate security risks.
• Collaborate with cross-functional teams to develop and promote secure coding practices incident response plans and security training.
• Mentor and guide junior and mid-level engineers fostering knowledge sharing and professional growth within the team.
• Drive the automation of security testing and compliance processesutilizingInfrastructure as Code (IaC) and security automation tools.
• Stay abreast of industry trends emerging threats and best practices inDevSecOpsand cybersecurity to continually improve security posture.
• Assessing designing developing testing and implementing Business Continuity & Disaster Recovery (BC/DR) solutions into a complex environment.

Basic Qualifications:

• US Citizen with at least an active Top Secret clearance with the ability to obtain and maintain a SCI prior to your start date.
• Bachelors degree with 8 years of experience or a Masters Degree with 6 years of experience. Additional experience may be considered in lieu of a degree.
• Must have 2 years of experience with JAVA
• DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
• Strong understanding of software development paradigms and supporting technologies ( management & version control CI/CD Agile planning tools such as Jira or Gitlab)
• Strongbackground using Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Strong experience configuring CI/CD pipelines supporting software development activitiesin aDevSecOpsenvironment
• Strongbackground in relational databases such as PostgreSQL MySQL or MS SQL Server.
• Strong experienceadministering complex environmentswith Linux and Windows operating systems network administration and networking protocols/functions (e.g. HTTP HTTPS SSL/TLS SMTP DNS)
• Extensive experience integrating security tooling into a hybrid cloud environment with a nuanced understanding of the capabilities and drawbacksof eachcomponent
• Extensive experience provisioning and managing resources withinhybridIaaS/Cloud infrastructures (e.g. Azure AWS Google Cloud Platform etc.)
• Extensive experience with container technologies such as Docker and container orchestration tools like Kubernetes
• Experience with automated provisioning and configuration tools like TerraformBicepCloudFormation Chef Puppet Ansible or similar technologies
• Experience integrating cloud services into solutions especially Azure cloud services
• Excellent problem solving and analysis skills including the ability to logically create structure and order from unstructured inputs.
• Self-starter thatis able towork independently whilepossessingthe communication skills to work effectively with software development teams and customers.
• Excellent interpersonalverbaland written communication skills.

Preferred Qualifications:

• Active DoD TS/SCI security clearance and the ability to maintain that clearance during your employment.
• Experience with Air Force Life Cycle Management Centerprograms.
• Microsoft Certified: Azure Solutions Architect Expert or similar certification.
• Advanced certifications such as Certified Information Systems Security Professional (CISSP) CertifiedDevSecOpsEngineer (CDE) or similar.
• Extensive experience with security tools and practices relevant toDevSecOps(e.g. SAST DAST IAST).
• Experience deploying configuring and managingDevSecOpstoolchains for an enterprise
• Familiarity with cloud platforms (e.g. AWS Azure Google Cloud) and their security frameworks.
• Strong understanding of container security and orchestration tools (e.g. Kubernetes).
• Experience delivering softwaresolutionsinto high-security or air-gapped environments in defense or other highly regulated industries such as finance or healthcare
• Experience with compliance standards (e.g. OWASP NIST) and DoD security regulations.
• Proven ability to drive change and influence security culture across an organization.

If youre looking for comfort keep scrolling. At Leidos we outthink outbuild and outpace the status quo because the mission demands it. Were not hiring followers. Were recruiting the ones who disrupt provoke and refuse to fail. Step 10 is ancient history. Were already at step 30 and moving faster than anyone else dares.

Original Posting:

Pay Range:

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job education experience knowledge skills and abilities as well as internal equity alignment with market data applicable bargaining agreement (if any) or other law.