This role pays less than
86%
of similar roles. Most pay
$126,800–$197,618
— the shaded band above.
At the midpoint, this role pays about
$122k
versus about
$162k
for comparable roles.
Based on 240 similar postings.
Employer
About Leidos
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations.
Leidos currently has
350 open roles
on FindRole.
Listed pay typically runs
$92,300–$166,850
across 299 roles with salary data.
The DevSecOps Security Engineer joins the Air Traffic Business Area to support the development of the Leidos Common Automation Platform. This role focuses on building and operating automated security controls within a hybrid cloud data mesh architecture to enable next-generation air traffic management capabilities. You will implement and maintain SAST, DAST, software composition analysis, and container scanning in CI/CD pipelines while enforcing security gates, artifact signing, and SBOMs. Key responsibilities include hardening container images, managing Kubernetes security policies like RBAC and network policies, and implementing policy-as-code using OPA or Kyverno. You will utilize tools such as HashiCorp Vault, Nessus, Trivy, and Grype while leveraging Python, Bash, or Go for automation. The role addresses the challenge of maintaining a high security posture in mission-critical infrastructure through continuous monitoring and automated evidence production.
Implement and maintain automated security controls like SAST, DAST, and container scanning within CI/CD pipelines.
Enforce security gates, artifact signing, provenance verification, and SBOM generation to prevent unauthorized deployments.
Drive the hardening of container images and remediate critical or high-severity vulnerabilities.
Configure Kubernetes security controls including network policies, RBAC, admission controls, and security context constraints.
Secure workloads using secrets management, mutual TLS (mTLS), and service mesh policies.
Develop policy-as-code and infrastructure guardrails using tools like OPA/Rego or Kyverno.
Produce security evidence to support platform authorization and continuous monitoring requirements.
Triage vulnerabilities and perform root cause analysis for security incidents in partnership with application teams.
What we're looking for
Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field (additional experience/training may be considered in lieu of degree).
4+ years of relevant experience.
Hands-on experience integrating SAST, DAST, software composition analysis, and container scanning into CI/CD pipelines.
Experience securing Kubernetes and container environments, including pod security, network policies, RBAC, admission controls, and hardened base images.
Experience with vulnerability scanning and remediation using tools such as Nessus, Trivy, Grype, or Qualys.
Experience with secrets management (HashiCorp Vault or equivalent) and security automation using Python, Bash, or Go.
Working knowledge of NIST 800-53, automated security evidence, and AWS or Azure cloud security.
U.S. citizenship required, with the ability to obtain a Public Trust and meet continuous U.S. residency requirements for at least 3 of the prior 5 years.
Security+ CE, CySA+, or equivalent DoD 8570 IAT Level II certification (preferred).