Stateside Spec Engineering jobs in the United States

Leidos

DevSecOps Engineer

Remote (US) · Remote (US) · Mid

Discipline
Software
Industry
Defense
Constraints
U.S. person required

Spec sheet

Automatically summarized from the employer’s posting. Check the original description below for full requirements.

DevSecOps Engineer at Leidos in the US remote location focusing on integrating security into software development. Requires 5+ years in application security, CI/CD, and US citizenship.

$87,100–$157,450 / year · Day shift · 5+ years · Bachelor’s degree in Cybersecurity, Computer Science, or related field

Required

  • DevSecOps
  • CI/CD
  • application security
  • SAST
  • DAST
  • SCA
  • vulnerability management
  • secure coding practices

Preferred

  • secure code reviews
  • federal/regulatory experience
  • container + cloud security
  • threat modeling
  • risk-based prioritization

Benefits

  • medical
  • 401k
  • PTO

Get new Software roles by email.

Free. We email only when something new matches, and only after you confirm. More options.

Employer description

Leidos is seeking an embedded DevSecOps Engineer within a DevSecOps environment, responsible for proactively identifying, assessing, and remediating application security risks across the software development lifecycle. The individual works closely with Project Managers, development, architecture, and operations teams to support priorities and roadmap of DevSecOps team, identify epics, integrate security into design and implementation, conduct code reviews and testing, address vulnerabilities, and support incident response. This position also plays a key role in supporting secure coding practices, coordinating remediation efforts, and ensuring security activities align with program priorities and delivery timelines.

     

 

Primary Responsibilities      

Analyze application designs and architectures to identify potential security risks and recommend secure design patternsPerform manual and automated code reviews to identify vulnerabilities and guide remediationIntegrate and maintain application security tools within CI/CD pipelines for continuous testingConduct application security testing (SAST, DAST, SCA, and penetration testing coordination)Manage vulnerability findings, including triage, prioritization, tracking, and coordination of remediation with development teamsPartner with developers to implement secure coding practices and provide hands-on guidance and trainingSupport application-level incident response, including investigation and remediation of security eventsTrack and report vulnerability status and risk posture in formal reviews and program reportingImplementing established Security policies and recommending improvementsCoordinate across teams to align DevSecOps activities with development roadmaps, releases, and operational prioritiesFacilitate daily scrum and Sprint planning for DevSecOpsSupport Project Managers with the unforeseen work/priorities into current team backlog and remove impediments from the team 

Basic Qualifications.

Bachelor’s degree in Cybersecurity, Computer Science, or related field with 5+ years of experience (or equivalent experience). Additional years of experience may be substituted in lieu of degree.5+ years of hands-on application security experience within a software development environmentExperience integrating security into CI/CD pipelines and DevSecOps workflowsProven ability to manage and track vulnerabilities through remediation in collaboration with development teamsUnderstanding of secure software development lifecycle (SDLC) principlesExperience supporting or participating in security incident responseStrong ability to communicate security risks and recommendations to technical teamsExperience working in cross-functional environments with developers, architects, and operations teamsExperience working in DevSecOps team with Agile development frameworkMust have US Citizenship  

Preferred Qualifications

Experience performing secure code reviews and identifying common vulnerabilities (e.g., OWASP Top 10)Experience with application security testing tools (SAST, DAST, SCA) and interpreting resultsExperience supporting federal or regulated environments (e.g., DOJ, FedRAMP, FISMA)Familiarity with threat modeling methodologies and secure architecture practicesExperience with container and cloud security (e.g., Kubernetes, AWS, Azure)Knowledge of risk-based vulnerability prioritization and release gating practices  

If you’re looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We’re not hiring followers. We’re recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We’re already at step 30 — and moving faster than anyone else dares.

Original Posting:November 6, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

Stateside Spec lists roles for engineering teams in the United States. Work-authorization notes come from the employer. We do not guarantee visa policy. Apply off-site. Report an issue with this listing View employer source