Remote opportunity at
LeidosDevSecOps Engineer
Leidos seeks an embedded DevSecOps Engineer to join a DevSecOps environment and take responsibility for identifying, assessing, and remediating application security risks across the entire software…
Career Tools
About This Role
Leidos seeks an embedded DevSecOps Engineer to join a DevSecOps environment and take responsibility for identifying, assessing, and remediating application security risks across the entire software development lifecycle. This remote position involves collaborating closely with project managers, development teams, architecture groups, and operations personnel to align security priorities with team roadmaps. The professional in this role will pinpoint epics, integrate security measures directly into design and implementation phases, execute code…
Job Description
Leidos seeks an embedded DevSecOps Engineer to join a DevSecOps environment and take responsibility for identifying, assessing, and remediating application security risks across the entire software development lifecycle. This remote position involves collaborating closely with project managers, development teams, architecture groups, and operations personnel to align security priorities with team roadmaps. The professional in this role will pinpoint epics, integrate security measures directly into design and implementation phases, execute code reviews and testing protocols, handle vulnerabilities, and assist with incident response activities. Furthermore, the engineer supports secure coding practices, manages remediation coordination, and ensures alignment with program delivery timelines and security policies. Ideal candidates possess a background in cybersecurity or computer science combined with hands-on application security experience within software development environments.
Responsibilities
- Analyze application architectures and designs to uncover potential security risks and suggest secure design patterns
- Conduct both manual and automated code reviews to spot vulnerabilities and guide remediation efforts
- Incorporate and maintain application security tools inside CI/CD pipelines for continuous testing
- Perform application security testing including SAST, DAST, SCA, and coordinate penetration testing
- Handle vulnerability management tasks such as triage, prioritization, tracking, and remediation coordination with development teams
- Partner directly with developers to provide hands-on guidance, training, and implementation of secure coding practices
- Aid in application-level incident response by investigating and remediating security events
- Monitor and report on vulnerability status and risk posture during formal reviews and program reporting
- Implement established security policies and suggest necessary enhancements
- Coordinate cross-functional activities to match DevSecOps schedules with development roadmaps, releases, and operational goals
- Facilitate daily scrum and sprint planning sessions for the DevSecOps team
- Assist project managers by integrating unforeseen work into the team backlog and removing operational impediments
Requirements
- Bachelor’s degree in Cybersecurity, Computer Science, or a related field with at least 5 years of experience, or equivalent relevant experience
- Minimum of 5 years of hands-on application security experience within a software development environment
- Demonstrated experience integrating security into CI/CD pipelines and DevSecOps workflows
- Proven capability to track and manage vulnerabilities through remediation alongside development teams
- Solid understanding of secure software development lifecycle principles
- Experience participating in or supporting security incident response
- Strong communication skills for presenting security risks and recommendations to technical staff
- Experience operating in cross-functional settings alongside developers, operations, and architects
- Background working in a DevSecOps team utilizing an Agile development framework
- US citizenship
Qualifications
- Experience executing secure code reviews and recognizing common vulnerabilities like the OWASP Top 10
- Familiarity with application security testing tools including SAST, DAST, and SCA alongside result interpretation
- Experience supporting federal or regulated environments such as DOJ, FedRAMP, or FISMA
- Knowledge of secure architecture practices and threat modeling methodologies
- Experience dealing with container and cloud security tools and platforms like Kubernetes, AWS, and Azure
- Knowledge of risk-based vulnerability prioritization and release gating practices
Core Skills
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
What is the location or remote policy for this role?
The posting specifies that the role is remote.
What is the salary range for the DevSecOps Engineer position?
The pay range is USD 87,100 to 157,450 per year, though actual compensation depends on factors such as experience, skills, and business needs.
What level of education or experience is required?
Candidates must have a Bachelor’s degree in Cybersecurity, Computer Science, or a related field with 5+ years of experience, or equivalent experience, including at least 5 years of hands-on application security experience.
Are there any citizenship requirements for this job?
Yes, applicants must have US citizenship.
What benefits are included with this position?
Specific benefits are not detailed in the job posting.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.