DevSecOps Engineer

CHAOS Industries; El Segundo (CA); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits 100% paid

Free daily lunch

Unlimited PTO

Job summary

CHAOS Industries is looking for a DevSecOps Engineer to enhance security in software development at their El Segundo location. You will design secure CI/CD pipelines and automate compliance checks, collaborating closely with engineering teams.

The role demands proficiency in scripting, cloud security, and CI/CD tooling. The salary range is competitive, between $110,000 and $160,000, with excellent health benefits and growth opportunities.

Qualifications

• 4–7 years of experience in DevOps, software engineering, or cybersecurity.
• Hands-on experience integrating security tooling into CI/CD pipelines.
• Active Secret clearance required at time of hire.

Responsibilities

• Design and maintain secure CI/CD pipelines integrating security tools.
• Automate compliance controls and vulnerability scanning.
• Build and manage container security posture.

Skills

Security tooling integration

CI/CD pipelines

Container security

Scripting languages

Cloud security

Education

Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity or related field

Tools

GitHub Actions

Docker

Kubernetes

Terraform

SonarQube

Job description

CHAOS Industries is redefining modern defense with a multi-product portfolio that gives the ultimate advantage—domain dominance. The company's products are powered by Coherent Distributed Networks (CDN™), empowering warfighters, commercial air operators, and border protection teams to act faster, adapt rapidly, and stay ahead of evolving threats.

CHAOS Industries was founded in 2022 and has raised a total of $1 billion in funding from leading investors, including 8VC, Accel, and Valor Equity Partners. The company is headquartered in Los Angeles, with offices in Washington, D.C., San Francisco, San Diego, Seattle, and London.

Role Overview

Chaos Industries is hiring a DevSecOps Engineer to embed security into every layer of our software development and infrastructure delivery lifecycle. This is a broad, hands‑on engineering role; you’ll own CI/CD pipeline security, automate compliance and vulnerability checks, harden cloud and on‑premise environments, and partner with development and operations teams to make “secure by default” a reality, not a checkbox. You’ll work across classified and unclassified environments, applying the same engineering rigor to security that our developers apply to product — fast, repeatable, and built to scale.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines integrating automated security scanning tools (SAST, DAST, SCA, secrets detection) across development workflows using GitHub Actions, GitLab CI, Jenkins, or equivalent.
• Automate security and compliance controls including STIG/SRG validation, vulnerability scanning (ACAS/Nessus), and policy‑as‑code enforcement (OPA, Conftest) within pipeline and infrastructure workflows.
• Collaborate with software engineers to identify, triage, and remediate application security vulnerabilities; champion secure coding practices, threat modeling, and developer security training across engineering teams.
• Build and manage container security posture including image hardening, runtime protection, Kubernetes security configurations (RBAC, Pod Security Admission, network policies), and registry scanning.
• Design and maintain infrastructure‑as‑code (Terraform, CloudFormation, Ansible) with integrated security controls; enforce least‑privilege, secrets management (Secrets Manager), and configuration compliance.
• Support RMF/ATO activities by automating evidence collection, generating compliance reports, and maintaining continuous monitoring artifacts for cloud and on‑premise systems operating within classified or CUI environments.
• Monitor security tooling telemetry, pipeline health dashboards, and vulnerability metrics; produce trend reports and actionable remediation backlogs for engineering and security leadership.
• Coordinate with ISSM/ISSO teams and system administrators to ensure DevSecOps practices align with authorization boundary requirements, CMMC Level 2/3 controls, and DFARS obligations.
• Evaluate and introduce new DevSecOps tooling, frameworks, and practices; build internal documentation, runbooks, and playbooks to operationalize security automation across teams.
• Travel up to 15% CONUS to support program site integrations, government customer engagements, and security architecture reviews.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related technical field. Equivalent experience considered.
• 4–7 years of experience in DevOps, software engineering, or cybersecurity, with demonstrated hands‑on experience integrating security tooling into CI/CD pipelines and cloud environments.
• Proficiency in at least one scripting or programming language (Python, Bash, Go, or equivalent) used to build automation, security tooling integrations, or infrastructure‑as‑code.
• Hands‑on experience with container technologies (Docker, Kubernetes) including security hardening, image scanning, and runtime protection in a production environment.
• Working knowledge of cloud security on AWS GovCloud or Azure Government including IAM, network security groups, security monitoring services, and secrets management.
• Familiarity with SAST, DAST, and SCA tooling (SonarQube, Checkmarx, Snyk, OWASP ZAP, Black Duck, or equivalent) and their integration into automated pipelines.
• Active Secret clearance required at time of hire. TS/SCI eligibility preferred.

Preferred Requirements

• Active TS clearance.
• Experience supporting NIST RMF ATO processes for software systems or cloud environments, including automated evidence collection and continuous monitoring workflows.
• Familiarity with CMMC Level 2/3 practices, DFARS 252.204‑7012, and their application to software development and CI/CD pipeline security controls.
• Experience with GitOps workflows and policy‑as‑code frameworks (OPA/Gatekeeper, Kyverno, Conftest) for automated governance enforcement.
• Knowledge of software supply‑chain security practices: SBOM generation, artifact signing (Sigstore/Cosign), and dependency provenance tracking.
• Experience operating in classified or air‑gapped environments with disconnected CI/CD toolchains and offline artifact repositories.
• Relevant certifications: Security+, AWS Security Specialty, or equivalent.

Benefits

• Health Benefits: Medical, dental, and vision benefits 100% paid for by the company.
• Additional benefits: 401(k) (½ company match up to 6% of pay), FSA, HSA, life insurance, and more.
• Perks: Free daily lunch, No meeting Fridays, unlimited PTO, casual dress code.
• Compensation Components: Competitive base salaries, generous pre‑IPO stock option grants, relocation assistance, and (coming soon) annual bonuses.
• Team Growth: 250 employees and counting across five global offices.

Salary Range: $110,000 – $160,000 (base only; excludes bonus, equity, and benefits).

EEO Statement: As set forth in CHAOS Industries’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Export Controls: This position may require access to information and technology subject to U.S. export controls.