Senior DevSecOps Engineer

Senior Dev Sec Ops  Engineer

Oklahoma City, OK

The Defense Sector at Leidos is looking for a Senior Dev Sec Ops  Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Senior Dev Sec Ops  Engineer will enhance the integration of security practices into our Dev Ops processes for a large Air Force weapons system program. This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle.

The ideal candidate will have experience in Dev Sec Ops  practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in Dev Sec Ops  within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.

Primary Responsibilities:

• Lead the design and implementation of security practices within the Dev Ops pipeline for DoD applications, ensuring alignment with regulatory requirements.
• Evaluate and select security tools, integrating them into CI/CD workflows to enhance application security.
• Conduct advanced vulnerability assessments, threat modeling, and penetration testing to proactively identify and mitigate security risks.
• Collaborate with cross-functional teams to develop and promote secure coding practices, incident response plans, and security training.
• Mentor and guide junior and mid-level engineers, fostering knowledge sharing and professional growth within the team.
• Drive the automation of security testing and compliance processes, utilizing Infrastructure as Code (IaC) and security automation tools.
• Stay abreast of industry trends, emerging threats, and best practices in Dev Sec Ops  and cybersecurity to continually improve security posture.
• Assessing, designing, developing, testing, and implementing Business Continuity & Disaster Recovery (BC/DR) solutions into a complex environment.

Basic Qualifications:

• US Citizen with at least an active Top Secret clearance and the ability to obtain and maintain a SCI prior to your start date
• Bachelor's degree with 8+ years of experience or a Master's degree with 6+ years of experience. Additional experience may be considered in lieu of a degree
• DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
• Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
• Strong background using Infrastructure as Code (IaC) and Configuration as Code (CaC)
• Strong experience configuring CI/CD pipelines supporting software development activities in a Dev Sec Ops  environment
• Strong background in relational databases such as PostgreSQL, MySQL, or MS SQL Server
• Strong experience administering complex environments with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
• Extensive experience integrating security tooling into a hybrid cloud environment, with a nuanced understanding of the capabilities and drawbacks of each component
• Extensive experience provisioning and managing resources within hybrid IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
• Extensive experience with container technologies such as Docker and container orchestration tools like Kubernetes
• Experience with automated provisioning and configuration tools like Terraform, Bicep, Cloud Formation, Chef, Puppet, Ansible or similar technologies
• Experience integrating cloud services into solutions, especially Azure cloud services
• Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs
• Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers
• Excellent interpersonal, verbal and written communication skills

Preferred Qualifications:

• Experience with Air Force Life Cycle Management Center programs
• Microsoft Certified:
  Azure Solutions Architect Expert or similar certification
• Advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified Dev Sec Ops  Engineer (CDE), or similar
• Extensive experience with security tools and practices relevant to Dev Sec Ops  (e.g., SAST, DAST, IAST)
• Experience deploying, configuring, and managing Dev Sec Ops  tool chains for an enterprise
• Familiarity with cloud platforms (e.g., AWS, Azure, Google Cloud) and their security frameworks
• Strong understanding of container security and orchestration tools (e.g., Kubernetes)
• Experience delivering software solutions into high-security or air-gapped environments in defense or other highly regulated industries such as finance or healthcare
• Experience with compliance standards (e.g., OWASP, NIST) and DoD security regulations
• Proven ability to drive change and influence security culture across an organization