Senior DevSecOps Engineer

Senior Dev Sec Ops  Engineer Oklahoma City, OK or Lorton, VATS/SCI Clearance The Defense Sector at Leidos is looking for a Senior Dev Sec Ops  Engineer to support a fast-paced program with the Air Force Life Cycle Management Center. The Senior Dev Sec Ops  Engineer will enhance the integration of security practices into our Dev Ops processes for a large Air Force weapons system program.

This role is vital for ensuring that security is a fundamental aspect of the software development lifecycle. The ideal candidate will have experience in Dev Sec Ops  practices and a strong desire to improve security measures within our applications. This position offers a valuable opportunity to further develop your career in Dev Sec Ops  within an Air Force program, contributing to the secure and efficient development of software in a challenging and innovative environment.

Primary Responsibilities:

Lead the design and implementation of security practices within the Dev Ops pipeline for DoD applications, ensuring alignment with regulatory requirements.

Evaluate and select security tools, integrating them into CI/CD workflows to enhance application security.

Conduct advanced vulnerability assessments, threat modeling, and penetration testing to proactively identify and mitigate security risks.

Collaborate with cross-functional teams to develop and promote secure coding practices, incident response plans, and security training.

Mentor and guide junior and mid-level engineers, fostering knowledge sharing and professional growth within the team.

Drive the automation of security testing and compliance processes, utilizing Infrastructure as Code (IaC) and security automation tools.

Stay abreast of industry trends, emerging threats, and best practices in Dev Sec Ops  and cybersecurity to continually improve security posture.

Assessing, designing, developing, testing, and implementing Business Continuity & Disaster Recovery (BC/DR) solutions into a complex environment.

Basic Qualifications:

US Citizen with at least an active Top Secret clearance and the ability to obtain and maintain a SCI prior to your start date Bachelor’s degree with 8+ years of experience or a Master’s degree with 6+ years of experience. Additional experience may be considered in lieu of a degree

DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher

Strong understanding of software development paradigms and supporting technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
Strong background using Infrastructure as Code (IaC) and Configuration as Code (CaC)
Strong experience configuring CI/CD pipelines supporting software development activities in a Dev Sec Ops  environment

Strong background in relational databases such as PostgreSQL, MySQL, or MS SQL Server Strong experience administering complex environments with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
Extensive experience integrating security tooling into a hybrid cloud environment, with a nuanced understanding of the capabilities and drawbacks of each component

Extensive experience provisioning and managing resources within hybrid IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)Extensive experience with container technologies such as Docker and container orchestration tools like Kubernetes

Experience with automated provisioning and configuration tools like Terraform, Bicep, Cloud Formation, Chef, Puppet, Ansible or similar technologies

Experience integrating cloud services into solutions, especially Azure cloud services

Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs

Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers

Excellent interpersonal, verbal and written communication skills

Preferred Qualifications:

Experience with Air Force Life Cycle Management Center programs

Microsoft Certified:
Azure Solutions Architect Expert or similar certification

Advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified Dev Sec Ops  Engineer (CDE), or similar

Extensive experience with security tools and practices relevant to Dev Sec Ops  (e.g., SAST, DAST, IAST)
Experience deploying, configuring, and managing Dev Sec Ops …