Leidos logo

DevSecOps Engineer

Leidos

Remote · USJob$87–157K/yrSeen 1 day agoSeen in employer's feed 1 day ago

Most applications go out cold — see where you stand first. No sign-up to start.

You apply on the employer's site, with no Olive account needed.

Watch jobs like this.

Don't just apply. Show up ready.

Olive works from this exact posting.

At a glance

Compensation
$87–157K/yr
Location
Remote · US
Work Authorization
US work authorization required

Olive lists jobs from US employers, including remote roles you can work from the United States.

Job overview

Leidos seeks an embedded DevSecOps Engineer to identify, assess, and remediate application security risks across the software development lifecycle. The role integrates security into design, implementation, and CI/CD pipelines; coordinates vulnerability remediation with development teams; supports application-level incident response; and aligns security work with program priorities and delivery timelines. The engineer also facilitates Agile planning and supports secure coding practices.

Skills & qualifications

RequiredNice to have

Skills

Application SecurityCI/CD PipelinesDevSecOps WorkflowsVulnerability ManagementSecure SDLCIncident ResponseSecurity CommunicationCross-Functional CollaborationAgile DevelopmentSecure Code ReviewOWASP Top 10SASTDASTSCAFederal ComplianceThreat ModelingSecure ArchitectureContainer SecurityCloud SecurityKubernetesAWSAzureRisk-Based PrioritizationRelease Gating

Qualifications

Bachelor's in Cybersecurity or Related5+ Years Application Security ExperienceUS Citizenship

Benefits

Medical Insurance
Paid Time Off
401(k) Match

Full job description

Description

Leidos is seeking an embedded DevSecOps Engineer within a DevSecOps environment, responsible for proactively identifying, assessing, and remediating application security risks across the software development lifecycle. The individual works closely with Project Managers, development, architecture, and operations teams to support priorities and roadmap of DevSecOps team, identify epics, integrate security into design and implementation, conduct code reviews and testing, address vulnerabilities, and support incident response. This position also plays a key role in supporting secure coding practices, coordinating remediation efforts, and ensuring security activities align with program priorities and delivery timelines.

Primary Responsibilities

  • Analyze application designs and architectures to identify potential security risks and recommend secure design patterns

  • Perform manual and automated code reviews to identify vulnerabilities and guide remediation

  • Integrate and maintain application security tools within CI/CD pipelines for continuous testing

  • Conduct application security testing (SAST, DAST, SCA, and penetration testing coordination)

  • Manage vulnerability findings, including triage, prioritization, tracking, and coordination of remediation with development teams

  • Partner with developers to implement secure coding practices and provide hands-on guidance and training

  • Support application-level incident response, including investigation and remediation of security events

  • Track and report vulnerability status and risk posture in formal reviews and program reporting

  • Implementing established Security policies and recommending improvements

  • Coordinate across teams to align DevSecOps activities with development roadmaps, releases, and operational priorities

  • Facilitate daily scrum and Sprint planning for DevSecOps

  • Support Project Managers with the unforeseen work/priorities into current team backlog and remove impediments from the team

Basic Qualifications.

  • Bachelor’s degree in Cybersecurity, Computer Science, or related field with 5+ years of experience (or equivalent experience). Additional years of experience may be substituted in lieu of degree.

  • 5+ years of hands-on application security experience within a software development environment

  • Experience integrating security into CI/CD pipelines and DevSecOps workflows

  • Proven ability to manage and track vulnerabilities through remediation in collaboration with development teams

  • Understanding of secure software development lifecycle (SDLC) principles

  • Experience supporting or participating in security incident response

  • Strong ability to communicate security risks and recommendations to technical teams

  • Experience working in cross-functional environments with developers, architects, and operations teams

  • Experience working in DevSecOps team with Agile development framework

  • Must have US Citizenship

Preferred Qualifications

  • Experience performing secure code reviews and identifying common vulnerabilities (e.g., OWASP Top 10)

  • Experience with application security testing tools (SAST, DAST, SCA) and interpreting results

  • Experience supporting federal or regulated environments (e.g., DOJ, FedRAMP, FISMA)

  • Familiarity with threat modeling methodologies and secure architecture practices

  • Experience with container and cloud security (e.g., Kubernetes, AWS, Azure)

  • Knowledge of risk-based vulnerability prioritization and release gating practices

If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares.

Original Posting:

November 6, 2026

For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.

Pay Range:

Pay Range $87,100.00 - $157,450.00

The Leidos pay range for this job level is a general guideline onlyand not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

About Leidos

Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com .

Pay and Benefits

Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits .

Securing Your Data

Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at [email protected] .

If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission (https://reportfraud.ftc.gov/#/) .

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

#Remote

REQNUMBER: R-00196034

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. Leidos will consider qualified applicants with criminal histories for employment in accordance with relevant Laws. Leidos is an equal opportunity employer/disability/vet.

How this job compares

Set against the 576 open DevSecOps Engineer jobs on Olive Jobs, counted November 8, 2026.

Pay
  • This posting$87–157K/yr
  • Virginia median$110–185K/yr90 salary ranges
  • US median$100–179K/yr450 salary ranges

This range's midpoint, $122K, is 18% below the Virginia median midpoint ($150K) — in the lowest quarter of DevSecOps Engineer salary ranges in Virginia.

Openings
Olive Jobs lists 106 open DevSecOps Engineer jobs in Virginia and 576 across the US. 5% of them nationwide are listed as remote or flexible.
Hiring the most in Virginia
Experience
This posting asks for at least 5 years of experience; DevSecOps Engineer postings that state a minimum ask for 5 years at the median (493 postings).
Education
207 of the 576 open DevSecOps Engineer jobs (36%) ask for a bachelor's degree or higher.

Counted across the open, public US postings on Olive Jobs on November 8, 2026. Pay medians are the middle values of the low ends and of the high ends of postings that list both ends of a range in the same cadence (a yearly salary or an hourly rate); a range's midpoint is halfway between its ends. Pay and experience figures resting on fewer than 20 postings are left out.

Prepare for this role

You've read the whole posting — now see how you match it.