DevSecOps Engineer

Leidos is seeking an embedded Dev Sec Ops  Engineer within a Dev Sec Ops  environment, responsible for proactively identifying, assessing, and remediating application security risks across the software development lifecycle. The individual works closely with Project Managers, development, architecture, and operations teams to support priorities and roadmap of Dev Sec Ops  team, identify epics, integrate security into design and implementation, conduct code reviews and testing, address vulnerabilities, and support incident response.

This position also plays a key role in supporting secure coding practices, coordinating remediation efforts, and ensuring security activities align with program priorities and delivery timelines.

• Analyze application designs and architectures to identify potential security risks and recommend secure design patterns
• Perform manual and automated code reviews to identify vulnerabilities and guide remediation
• Integrate and maintain application security tools within CI/CD pipelines for continuous testing
• Conduct application security testing (SAST, DAST, SCA, and penetration testing coordination)
• Manage vulnerability findings, including triage, prioritization, tracking, and coordination of remediation with development teams
• Partner with developers to implement secure coding practices and provide hands-on guidance and training
• Support application-level incident response, including investigation and remediation of security events
• Track and report vulnerability status and risk posture in formal reviews and program reporting
• Implementing established Security policies and recommending improvements
• Coordinate across teams to align Dev Sec Ops  activities with development roadmaps, releases, and operational priorities
• Facilitate daily scrum and Sprint planning for Dev Sec Ops
• Support Project Managers with the unforeseen work/priorities into current team backlog and remove impediments from the team

• Bachelor's degree in Cybersecurity, Computer Science, or related field with 5+ years of experience (or equivalent experience). Additional years of experience may be substituted in lieu of degree.
• 5+ years of hands‑on application security experience within a software development environment
• Experience integrating security into CI/CD pipelines and Dev Sec Ops  workflows
• Proven ability to manage and track vulnerabilities through remediation in collaboration with development teams
• Understanding of secure software development lifecycle (SDLC) principles
• Experience supporting or participating in security incident response
• Strong ability to communicate security risks and recommendations to technical teams
• Experience working in cross‑functional environments with developers, architects, and operations teams
• Experience working in Dev Sec Ops  team with Agile development framework
• Must have US Citizenship

• Experience performing secure code reviews and identifying common vulnerabilities (e.g., OWASP Top 10)
• Experience with application security testing tools (SAST, DAST, SCA) and interpreting results
• Experience supporting federal or regulated environments (e.g., DOJ, FedRAMP, FISMA)
• Familiarity with threat modeling methodologies and secure architecture practices
• Experience with container and cloud security (e.g., Kubernetes, AWS, Azure)
• Knowledge of risk-based vulnerability prioritization and release gating practices

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone…