Senior/Staff DevSecOps Engineer

The role

You will build and own security infrastructure for engineering systems. This includes runtime security, access control, secrets management, compliance, and CI/CD hardening.

What you will do

• Own runtime security and vulnerability management across cloud and container environments.
• Design and enforce identity and access management (IAM) across AWS and internal systems.
• Own secrets and credentials management.
• Lead security incident response including detection, containment, and root cause analysis.
• Manage AWS Organization structure, account boundaries, SCPs, and guardrails.
• Harden and maintain CI/CD pipelines.
• Drive compliance efforts and maintain relevant frameworks.
• Build and maintain secure-by-default templates for repos, pipelines, and infrastructure modules.
• Reduce friction through automation for certificate issuance, secrets access, and policy-as-code.
• Produce practical security guidance and contribute to hiring and team-building.

Required qualifications

• 8+ years in DevSecOps, platform security, or a closely related security engineering role.
• Deep hands-on experience with AWS — IAM, SCPs, Organizations, security services (GuardDuty, Security Hub, CloudTrail, etc.).
• Strong IaC experience with Terraform.
• Experience owning secrets management end-to-end in a production engineering environment.
• Proven track record designing and hardening CI/CD pipelines (GitHub Actions).
• Hands-on experience with container security, including image scanning and runtime controls.
• Experience leading or meaningfully contributing to a compliance program.
• Experience running incident response.
• Strong communication skills.

Nice to have

• CMMC Level 2 (or NIST SP 800-171) experience
• Experience growing a DSO or security engineering function
• Familiarity with observability tooling (LGTM stack)
• Background in configuration management tooling (Ansible or similar)
• Experience with developer-facing security platforms or internal tooling
• Interest in growing into a lead or manager role

Benefits

• Health: Medical, dental, and vision plan options.
• Life / AD&D, disability coverage options.
• Paid parental leave: 12 weeks for birthing parents, 4 weeks for non-birthing parents, 6 weeks for adoptive, foster, or intended parents.
• Paid holidays and flexible PTO.
• 401(k) with pre-tax and Roth options.
• HSA/FSA options, dependent care FSA.

Before you apply

• Role is limited to U.S. citizens.
• Requires eligibility to obtain and maintain a U.S. Government security clearance.
• Role may involve work in a controlled environment.

About the company

Founded in 2024, Twenty Technologies industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from various investors.