{"id":3947635,"url":"https://alion.io/job/leidos-devsecops-engineer-9","title":"DevSecOps Engineer","company":{"id":7791,"name":"Leidos","domain":"leidos.com","url":"https://alion.io/company/leidos","size_band":"5000+","is_staffing_agency":false,"employer_type":"services","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":77,"open_postings":317,"ghost_share":0.003,"stale_share":0.89,"repost_share":0.009,"time_to_fill_p50_days":28,"computed_at":"2026-11-08T05:47:12Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"posting_text","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["United States"],"countries":["US"],"hiring_countries":["US"],"hiring_countries_total":1,"salary":{"min":87100,"max":157450,"currency":"USD","period":"year","gross":null,"usd_annual":157450},"salary_estimate":null,"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"Scrum","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"FedRAMP","optional":true},{"name":"Kubernetes","optional":true},{"name":"OWASP Top 10","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-11-06T00:00:00Z","employer_posted_date":"2026-11-06","last_verified_at":"2026-11-08T22:36:42Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Leidos is seeking an embedded DevSecOps Engineer within a DevSecOps environment, responsible for proactively identifying, assessing, and remediating application security risks across the software development lifecycle. The individual works closely with Project Managers, development, architecture, and operations teams to support priorities and roadmap of DevSecOps team, identify epics, integrate security into design and implementation, conduct code reviews and testing, address vulnerabilities, and support incident response. This position also plays a key role in supporting secure coding practices, coordinating remediation efforts, and ensuring security activities align with program priorities and delivery timelines.\nPrimary Responsibilities\nAnalyze application designs and architectures to identify potential security risks and recommend secure design patterns\nPerform manual and automated code reviews to identify vulnerabilities and guide remediation\nIntegrate and maintain application security tools within CI/CD pipelines for continuous testing\nConduct application security testing (SAST, DAST, SCA, and penetration testing coordination)\nManage vulnerability findings, including triage, prioritization, tracking, and coordination of remediation with development teams\nPartner with developers to implement secure coding practices and provide hands-on guidance and training\nSupport application-level incident response, including investigation and remediation of security events\nTrack and report vulnerability status and risk posture in formal reviews and program reporting\nImplementing established Security policies and recommending improvements\nCoordinate across teams to align DevSecOps activities with development roadmaps, releases, and operational priorities\nFacilitate daily scrum and Sprint planning for DevSecOps\nSupport Project Managers with the unforeseen work/priorities into current team backlog and remove impediments from the team\nBasic Qualifications.\nBachelor’s degree in Cybersecurity, Computer Science, or related field with 5+ years of experience (or equivalent experience). Additional years of experience may be substituted in lieu of degree.\n5+ years of hands-on application security experience within a software development environment\nExperience integrating security into CI/CD pipelines and DevSecOps workflows\nProven ability to manage and track vulnerabilities through remediation in collaboration with development teams\nUnderstanding of secure software development lifecycle (SDLC) principles\nExperience supporting or participating in security incident response\nStrong ability to communicate security risks and recommendations to technical teams\nExperience working in cross-functional environments with developers, architects, and operations teams\nExperience working in DevSecOps team with Agile development framework\nMust have US Citizenship \nPreferred Qualifications\nExperience performing secure code reviews and identifying common vulnerabilities (e.g., OWASP Top 10)\nExperience with application security testing tools (SAST, DAST, SCA) and interpreting results\nExperience supporting federal or regulated environments (e.g., DOJ, FedRAMP, FISMA)\nFamiliarity with threat modeling methodologies and secure architecture practices\nExperience with container and cloud security (e.g., Kubernetes, AWS, Azure)\nKnowledge of risk-based vulnerability prioritization and release gating practices \nIf you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo - because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 - and moving faster than anyone else dares.\nOriginal Posting:\nNovember 6, 2026For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.\nPay Range:\nPay Range $87,100.00 - $157,450.00The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.","description_format":"text","description_chars":4505,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Equity"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["DevSecOps","National Security","C4ISR","Engineering Services"],"lifecycle":[{"event":"open","at":"2026-11-08T22:36:42Z"}],"visa":[{"country":"US","licensed_sponsor":true,"adverts_offering_sponsorship_24m":0,"sanctioned_now":false,"evidence":"H-1B filings in 12 months: 50 · green card filings: 24","filings_12m":50,"filings_prev_12m":58,"green_card_filings_12m":24,"median_offered_wage_usd":124257,"route":null,"cap_exempt":false,"checked_at":"2026-11-08T10:45:15+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":4}],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":28,"reasons":["conf:0","win:early","comp:brand"],"computed_at":"2026-11-08T23:15:38Z"},"pay":{"stated_usd_annual":157450,"is_top_pay":false},"html_url":"https://alion.io/job/leidos-devsecops-engineer-9","json_url":"https://alion.io/job/leidos-devsecops-engineer-9.json","meta":{"generated_at":"2026-11-08T23:15:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":48436,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-09T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.1,"usd":0.01,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":7791},"rest":"https://alion.io/mcp/rest/get_company?id=7791"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fleidos-devsecops-engineer-9"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":2,"usd":0.2},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fleidos-devsecops-engineer-9"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.1,"usd":0.01},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fleidos-devsecops-engineer-9"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/leidos-devsecops-engineer-9\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fleidos-devsecops-engineer-9"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3947635}},{"tool":"search_jobs","arguments":{"company":"leidos.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3947635},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}