Junior DevSecOps Engineer

$65,000 - $117,500/Yr

Leidos - Oklahoma City, OK

Full-time - Entry Level

Oklahoma City, OK

Professional, Scientific, and Technical Services

About the position

The Junior DevSecOps Engineer at Leidos will support the integration of security practices into DevOps processes for a significant Air Force weapons system program. This role is essential for embedding security throughout the software development lifecycle, from design to deployment, and is ideal for candidates eager to learn and grow in a collaborative environment while enhancing the security and efficiency of applications.

Responsibilities

• Collaborate with development, operations, and security teams to integrate security practices into the DevOps pipeline for DoD applications.
• Assist in the implementation and automation of security tools and processes within CI/CD workflows.
• Conduct vulnerability assessments and assist in remediating identified security issues in applications and infrastructure.
• Support the configuration and management of security tools (e.g., static code analysis, dynamic application security testing).
• Participate in incident response activities and assist in monitoring security alerts and incidents.
• Document security policies, procedures, and best practices for development teams, ensuring compliance with DoD standards.
• Stay informed about the latest security trends, tools, and best practices in DevSecOps relevant to DoD programs.

Requirements

• US Citizen with at least a Top Secret clearance
• Bachelor's Degree with 2 years of experience or Master's degree in computer science or similar field
• Fundamental background with software design patterns and programming languages
• Fundamental background with software development paradigms and technologies (e.g., change management & version control, CI/CD, Agile planning tools such as Jira or Gitlab)
• Experience with Linux and Windows operating systems, network administration, and networking protocols/functions (e.g., HTTP, HTTPS, SSL/TLS, SMTP, DNS)
• Experience with container technologies such as Docker and container orchestration tools like Kubernetes
• Excellent problem solving and analysis skills, including the ability to logically create structure and order from unstructured inputs
• Self-starter that is able to work independently while possessing the communication skills to work effectively with software development teams and customers
• Effective communication skills for working with cross-functional teams.

Nice-to-haves

• Experience with Air Force Life Cycle Management Center programs
• DoD 8140 intermediate certification or DoD 8570 IAM Level II certifications or higher
• Experience administering physical and digital infrastructure in a hybrid cloud environment
• Intermediate Azure Certifications such as AZ-104: Azure Administrator Associate or similar certifications from other Cloud Service Providers
• Experience with security tools and practices related to DevSecOps (e.g., SAST, DAST, IAST)
• Experience with automated provisioning and configuration tools like Terraform, CloudFormation, Chef, Puppet, Ansible or similar technologies
• Experience provisioning and managing resources within IaaS/Cloud infrastructures (e.g., Azure, AWS, Google Cloud Platform, etc.)
• Understanding of container security and orchestration tools (e.g., Kubernetes)
• Basic knowledge of compliance standards (e.g., OWASP, NIST) and DoD regulations
• Interest in continuous learning and professional development in cybersecurity and DevOps practices.