DevSecOps Engineer

Description

Dev Sec Ops  Engineer

Oklahoma City, OK

TS/SCI Clearance

The Defense Sector at Leidos is looking for a Dev Sec Ops  Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Mid-Level Dev Sec Ops  Engineer will enhance the integration of security practices into our Dev Ops processes for a large Air Force weapons system program. This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle.

The ideal candidate will have experience in Dev Sec Ops practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in Dev Sec Ops within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.

Primary Responsibilities:

• Support the integration of security practices into the Dev Ops pipeline for DoD applications, ensuring compliance with relevant standards.
• Implement and automate security tools and processes within CI/CD workflows to enhance the security posture of applications.
• Conduct vulnerability assessments, penetration testing, and threat modeling to identify and remediate security issues.
• Collaborate with development and operations teams to establish secure coding practices and implement security controls.
• Configure and manage security tools, including static code analysis, dynamic application security testing, and infrastructure as code (IaC) security.
• Participate in incident response activities, monitoring security alerts and incidents, and coordinating with cross-functional teams.
• Mentor junior team members and provide guidance on Dev Sec Ops  best practices and tools.

Basic Qualifications:

• US Citizen with at least an active Top Secret clearance with the ability to obtain and maintain a SCI prior to your start date.
• Bachelor’s degree with 4+ years of experience or a Master’s degree with 2+ years of experience. Additional experience may be considered in lieu of a degree.
• Three to five years of experience performing or supporting software development activities in a professional capacity.
• Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
• Strong experience with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
• Experience provisioning and managing resources within IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
• Experience with container technologies such as Docker and container orchestration tools like Kubernetes
• Experience with automated provisioning and configuration tools like Terraform, Cloud Formation, Chef, Puppet, Ansible or similar technologies
• Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs.
• Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers.
• Excellent interpersonal, verbal and written communication skills.

Preferred Qualifications:

• Experience with Air Force Life Cycle Management Center programs.
• DoD 8570 IAM Level II certification or higher (e.g. CASP, CISM, CISSP) or DoD 8140 Advanced certifications
• Intermediate or better cloud certifications such as Microsoft Certified:
  Azure Solutions Architect Expert or similar certification from another cloud provider.
• Experience with security tools and practices related to Dev Sec Ops  (e.g., SAST, DAST, IAST).
• Experience with compliance standards (e.g., OWASP, NIST) and DoD regulations.
• Understanding of Keycloak administration.
• Experience using Helm to deploy tools.
• 1-2 years of experience performing Configuration Management activities in a professional capacity related to software development.
• 3-5 years of experience performing Dev Sec Ops  activities in a professional capacity.
• Interest in continuous learning and professional development in cybersecurity and Dev Ops practices.

DABAOPP1

If…