About the role
Leidos is hiring a DevSecOps Security Engineer to build and operate automated security controls for its Common Automation Platform supporting air traffic management. The role integrates security into CI/CD pipelines, hardens cloud-native workloads, and produces evidence for platform security authorization. Responsibilities Implement and maintain automated security controls in CI/CD pipelines, including SAST, DAST, software composition analysis, container scanning, and infrastructure-as-code scanningEnforce security gates, artifact signing, provenance verification, and SBOMs (CycloneDX/SPDX) to prevent vulnerable or unverified deploymentsDrive container vulnerability remediation and hardening, including hardened minimal base images and elimination of critical/high findingsImplement Kubernetes security controls, including pod security, network policies, RBAC, admission controls, and security context constraintsSecure workloads through secrets management, mutual TLS (mTLS), service mesh p