DevSecOps Engineer

🔥 48 minutes ago

🇺🇸 United States – Remote

💵 $87.1k - $157.4k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Leidos

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 1969

🏥 Healthcare

💼 Consulting

📦 Logistics

Healthcare • Consulting • Logistics

Leidos is a leading systems integrator in science, technology, and engineering, providing solutions that transform and enable the missions of its customers. The company operates across various markets, including aviation, defense, energy, government, healthcare, intelligence, science, and space. Leidos is involved in AI, digital modernization, cyber operations, and integrated and mission software systems. With a commitment to diversity, equity, inclusion, and sustainability, Leidos also engages in charitable efforts and community enrichment programs. Additionally, it contributes to developing solutions for counter-unmanned aerial systems and electric vehicle infrastructure for military applications.

📋 Description

• Analyze application designs and architectures to identify potential security risks and recommend secure design patterns • Perform manual and automated code reviews to identify vulnerabilities and guide remediation • Integrate and maintain application security tools within CI/CD pipelines for continuous testing • Conduct application security testing, including SAST, DAST, SCA, and penetration testing coordination • Manage vulnerability findings through triage, prioritization, tracking, and remediation coordination with development teams • Partner with developers to implement secure coding practices and provide hands-on guidance and training • Support application-level incident response, including investigation and remediation of security events • Track and report vulnerability status and risk posture in formal reviews and program reporting • Implement established security policies and recommend improvements • Coordinate DevSecOps activities with development roadmaps, releases, and operational priorities • Facilitate daily scrum and Sprint planning for DevSecOps • Support Project Managers with unforeseen work and priorities in the team backlog and remove impediments

🎯 Requirements

• Bachelor’s degree in Cybersecurity, Computer Science, or related field with 5+ years of experience (or equivalent experience) • Additional years of experience may be substituted in lieu of degree • 5+ years of hands-on application security experience within a software development environment • Experience integrating security into CI/CD pipelines and DevSecOps workflows • Proven ability to manage and track vulnerabilities through remediation in collaboration with development teams • Understanding of secure software development lifecycle (SDLC) principles • Experience supporting or participating in security incident response • Strong ability to communicate security risks and recommendations to technical teams • Experience working in cross-functional environments with developers, architects, and operations teams • Experience working in DevSecOps team with Agile development framework • Must have US Citizenship • Experience performing secure code reviews and identifying common vulnerabilities (e.g., OWASP Top 10) • Experience with application security testing tools (SAST, DAST, SCA) and interpreting results • Experience supporting federal or regulated environments (e.g., DOJ, FedRAMP, FISMA) • Familiarity with threat modeling methodologies and secure architecture practices • Experience with container and cloud security (e.g., Kubernetes, AWS, Azure) • Knowledge of risk-based vulnerability prioritization and release gating practices

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume