Leidos
Senior DevSecOps Engineer
- Compensation
- Not disclosed
- Location
- Oklahoma City, OK
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 6+ years
- Category
- Security
- Posted
Skills
Must have
- US Citizen with at least an active Top Secret clearance and the ability to obtain and maintain a SCI prior to your start date
Nice to have
- Experience with Air Force Life Cycle Management Center programs
- Microsoft Certified: Azure Solutions Architect Expert or similar certification
- Advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified DevSecOps Engineer (CDE), or similar
- Extensive experience with security tools and practices relevant to DevSecOps (e.g., SAST, DAST, IAST)
- Experience deploying, configuring, and managing DevSecOps toolchains for an enterprise
- Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security frameworks
- Strong understanding of container security and orchestration tools (e.g., Kubernetes)
- Experience delivering software solutions into high-security or air-gapped environments in defense or other highly regulated industries such as finance or healthcare
- Experience with compliance standards (e.g., OWASP, NIST) and DoD security regulations
- Proven ability to drive change and influence security culture across an organization
Full description
Senior DevSecOps EngineerOklahoma City, OK or Lorton, VATS/SCI Clearance
The Defense Sector at Leidos is looking for a SeniorDevSecOps Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Senior DevSecOps Engineer will enhance the integration of security practices into our DevOps processes for a large Air Force weapons system program. This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle. The ideal candidate will have experience in DevSecOps practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in DevSecOps within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.
Primary Responsibilities:
- Lead the design and implementation of security practices within the DevOps pipeline for DoD applications, ensuring alignment with regulatory requirements.
- Evaluate and select security tools, integrating them into CI/CD workflows to enhance application security.
- Conduct advanced vulnerability assessments, threat modeling, and penetration testing to proactively identify and mitigate security risks.
- Collaborate with cross-functional teams to develop and promote secure coding practices, incident response plans, and security training.
- Mentor and guide junior and mid-level engineers, fostering knowledge sharing and professional growth within the team.
- Drive the automation of security testing and compliance processes, utilizing Infrastructure as Code (IaC) and security automation tools.
- Stay abreast of industry trends, emerging threats, and best practices in DevSecOps and cybersecurity to continually improve security posture.
- Assessing, designing, developing, testing, and implementing Business Continuity & Disaster Recovery (BC/DR) solutions into a complex environment.
Basic Qualifications:
- US Citizen with at least an active Top Secret clearance and the ability to obtain and maintain a SCI prior to your start date
- Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree
- DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
- Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
- Strong background using Infrastructure as Code (IaC) and Configuration as Code (CaC)
- Strong experience configuring CI/CD pipelines supporting software development activities in a DevSecOps environment