Junior DevSecOps Engineer

The Multi Domain Solutions Division at Leidos is looking for a Junior DevSecOps Engineer ready to support a fast-paced program with the Air Force Life Cycle Management Center. The Junior DevSecOps Engineer will assist in integrating security practices into our DevOps processes for a large Air Force weapons system program. This role is crucial for ensuring that security is embedded throughout the software development lifecycle, from design to deployment. The ideal candidate will be eager to learn and grow in a collaborative environment while contributing to the security and efficiency of our applications. 

Primary Responsibilities:

• Collaborate with development, operations, and security teams to integrate security practices into the DevOps pipeline for DoD applications. 
• Assist in the implementation and automation of security tools and processes within CI/CD workflows. 
• Conduct vulnerability assessments and assist in remediating identified security issues in applications and infrastructure. 
• Support the configuration and management of security tools (e.g., static code analysis, dynamic application security testing). 
• Participate in incident response activities and assist in monitoring security alerts and incidents. 
• Help document security policies, procedures, and best practices for development teams, ensuring compliance with DoD standards. 
• Stay informed about the latest security trends, tools, and best practices in DevSecOps relevant to DoD programs. 

Basic Qualifications:

• US Citizen with at least a Top Secret clearance
• Bachelors Degree with 2 years of experience or master's degree in computer science or similar field 
• Fundamental background with software design patterns and programming languages. 
• Fundamental background with software development paradigms and technologies (e.g. change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab) 
• Experience with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS) 
• Experience with container technologies such as Docker and container orchestration tools like Kubernetes 
• Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs. 
• Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers. 
• Effective communication skills for working with cross-functional teams. 

Preferred Qualifications:

• Experience with Air Force Life Cycle Management Center programs. 
• DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher 
• Experience administering physical and digital infrastructure in a hybrid cloud environment 
• Intermediate Azure Certifications such as AZ-104: Azure Administrator Associate or similar certifications from other Cloud Service Providers. 
• Experience with security tools and practices related to DevSecOps (e.g., SAST, DAST, IAST). 
• Experience with automated provisioning and configuration tools like Terraform, CloudFormation, Chef, Puppet, Ansible or similar technologies 
• Experience provisioning and managing resources within IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.) 
• Understanding of container security and orchestration tools (e.g., Kubernetes). 
• Basic knowledge of compliance standards (e.g., OWASP, NIST) and DoD regulations. 
• Interest in continuous learning and professional development in cybersecurity and DevOps practices.