Senior/Staff DevSecOps Engineer

The role

You will build and own security infrastructure including runtime security, access control, secrets management, and CI/CD hardening. You will embed with engineering teams to design secure-by-default foundations and automation.

What you will do

• Own runtime security and vulnerability management across cloud and container environments
• Design and enforce identity and access management (IAM) across AWS and internal systems
• Own secrets and credentials management
• Lead security incident response including detection, containment, and root cause analysis
• Manage AWS Organization structure, account boundaries, SCPs, and guardrails
• Harden and maintain CI/CD pipelines
• Drive compliance efforts and maintain relevant frameworks
• Build and maintain secure-by-default templates for repos, pipelines, and infrastructure modules
• Reduce friction through automation for certificate issuance, secrets access, and policy-as-code
• Produce practical security guidance and shape the direction of the DSO function

Required qualifications

• 8+ years in DevSecOps, platform security, or a closely related security engineering role
• Deep hands-on experience with AWS including IAM, SCPs, Organizations, and security services
• Strong IaC experience with Terraform and policy-as-code tooling
• Experience owning secrets management end-to-end in a production engineering environment
• Proven track record designing and hardening CI/CD pipelines using GitHub Actions
• Hands-on experience with container security including image scanning and runtime controls
• Experience leading or meaningfully contributing to a compliance program
• Experience running incident response and leading post-mortems
• Strong communication skills

Nice to have

• CMMC Level 2 (or NIST SP 800-171) experience
• Experience growing a DSO or security engineering function
• Familiarity with observability tooling and the LGTM stack
• Background in configuration management tooling like Ansible
• Experience with developer-facing security platforms or internal tooling
• Interest in growing into a lead or manager role

Benefits

• Medical, dental, and vision plan options
• Life / AD&D, disability coverage options
• Paid parental leave: 12 weeks for birthing parents, 4 weeks for non-birthing parents, 6 weeks for adoptive, foster, or intended parents
• Paid holidays
• Flexible PTO
• 401(k) with pre-tax and Roth options
• HSA/FSA options
• Dependent care FSA

Before you apply

• U.S. Citizenship Required
• Requires eligibility to obtain and maintain a U.S. Government security clearance
• Role may involve work in a controlled environment

About the company

Founded in 2024, Twenty Technologies industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, the company aims for American and allied primacy in cyberspace.