DevSecOps Engineer

Slingshot Aerospace; United States; À distance; USD 120 000 - 190 000; Plein temps

Résumé du poste

Slingshot Aerospace is hiring a DevSecOps Engineer to manage cloud security across AWS, Azure, and classified platforms, and to design secure software development practices across the lifecycle.

You will work with engineering teams to bake security into scalable cloud solutions, building automated pipelines and applying shift-left security principles in a fast‑moving startup environment.

Qualifications

• 3+ years of professional experience in a DevSecOps or similar role.
• Experience with container security practices within Kubernetes and Helm.
• Experience with security configuration of AWS Cloud Native Technologies.
• Deep working knowledge of version control (Git) and CI/CD tools (GitHub Actions).
• Experience with infrastructure as code frameworks including Terraform.
• Good understanding of networking, routing, firewalls, VPN, SSL.
• Knowledge of programming/scripting languages (Python, Bash, JavaScript).
• Keen attention to detail and industry best practices pertaining to privacy, security, and compliance.
• Skill and comfort working in a rapidly moving startup environment with dynamic objectives and iteration with users.

Responsabilités

• Execute all position responsibilities in alignment with Slingshot’s core values, mission, and purpose.
• Work within Engineering teams to interweave security with scalability, performance, reliability, and requirements for cloud solutions.
• Ensure security is baked into deliverables from the start with DevSecOps and shift-left mentality.
• Develop automated build and test pipelines focusing on security and compliance for cloud deployments.
• Secure and manage cloud-native resources on AWS and Azure via IaC and compliance-as-code.
• Administer and support developer and user access to cloud resources.
• Leverage observability tools to monitor security metrics for applications and resources.
• Participate in Agile software development and deployment processes.
• Provide ongoing support for services and applications critical to the business.
• Communicate methods, findings, and hypotheses with stakeholders.
• Perform other duties (≤10% of responsibilities).

Connaissances

DevSecOps

Kubernetes security

AWS security

Git & CI/CD

Infrastructure as Code

Python Bash JavaScript

Networking basics

Security compliance

Formation

B.S. in Computer Science or related field

Active TS/SCI clearance

Outils

GitHub Actions

Terraform

KNative

Description du poste

Meet Slingshot

At Slingshot Aerospace, we're on a mission to make space safer and more secure for everyone. Our work directly impacts global security, disaster response, climate monitoring, and the critical infrastructure that connects our world. We're a team of builders, thinkers, and problem-solvers who believe that the next generation of space operations will be powered by better data and smarter software.

We move fast, we're not afraid to fail, and we believe the best ideas can come from anywhere—whether you're in engineering, sales, product, or operations. If you want to work on something that truly matters, with people who care deeply about the impact we're making and help shape the future of an industry that's just getting started, you're in the right place.

What You’ll Do:

As a DevSecOps Engineer, you will manage the cloud security implementation for multiple cloud environments to include AWS, Azure, and classified platforms. You will also be responsible for designing, implementing, and maintaining secure software development practices and tools for Slingshot’s software development lifecycle.

Slingshot Aerospace cares deeply about our commitment to company values, mission, and purpose. The core competencies we will be looking to identify include: intellectual agility, ability to develop innovative solutions, leadership, performance orientation, and industry expertise.

Position Responsibilities:

• Executes all position responsibilities in alignment with Slingshot’s core values, mission, and purpose

• Work within Engineering teams to interweave security with the scalability, performance, reliability, and functional requirements to virtualized/cloud computing solutions

• Leverage industry best practices and experience to ensure that security is baked into deliverables from the start and that each product and program fully embrace a DevSecOps and “shift-left on security” mentality

• Develop automated build and test pipeline strategies including aspects of security and compliance to ensure viability of cloud deployment solutions

• Secure and manage cloud-native resource on providers like AWS and Azure through infrastructure-as-code and compliance-as-code

• Administer and support developer and user access to cloud resources

• Leverage observability tools to monitor security metrics for applications virtualized resources

• Participate in Agile software develop and deployment processes

• Provide ongoing support for the services and applications that are critical to our business needs

• Communicate methods, findings, and hypotheses with stakeholders

• Perform other duties as assigned (to be less than 10% of the responsibilities listed above)

Pre-Requisites

• Must have an active TS/SCI clearance or be eligible and willing to obtain one

Minimum Requirements

• 3+ years of professional experience in a DevSecOps or similar role

• Experience with container security practices within Kubernetes and Helm

• Experience with security configuration of AWS Cloud Native Technologies

• Deep working knowledge of version control (Git) and CI/CD tools (GitHub Actions)

• Experience with infrastructure as code frameworks including Terraform

• Good understanding of networking, routing, firewalls, VPN, SSL

• Knowledge of programming/scripting languages (Python, Bash, JavaScript) used in DevSecOps life cycles

• Keen attention to detail and industry best practices pertaining to privacy, security, and compliance

• Skill and comfort working in a rapidly moving startup environment with dynamic objectives and iteration with users

Preferred Skills

• Degree in computer science or related field

• Active TS/SCI clearance

• Experience with asynchronous processing and/or data streaming technologies, such as AWS Kinesis, Kafka, or ZeroMQ, KNative

• Experience with securing data platforms, microservices, distributed systems and deploying into classified cloud environments

• Experience with security audits/certifications such as SOC 2 Type 2, FedRAMP, CMMC 2.0, ISO 27001

• Early-stage data-centric startup experience

US-based Candidates

we are currently only able to hire residents of the following U.S. states: AL, AZ, CA, CO, DC, FL, GA, HI, IL, IN, KS, MA, MD, MI, MN, MO, MT, NC, NJ, NM, NV, NY, OH, OK, OR, RI, TN, TX, UT, VA, WA, WI, WV We are unable to consider candidates residing in other U.S. states at this time.

Internationally-based Candidates

we are currently only able to hire residents of the following locations: United Kingdom. We are unable to consider candidates residing in other countries at this time.

Equity, Diversity & Inclusion are key to our success. We are an Equal Opportunity Employer and our employees are people with different strengths, experiences, and backgrounds, who share a passion for creating a safer, more connected world. Diversity not only includes race and gender identity, but also national origin, citizenship, sex, color, veteran status, disability, genetic information, or any other protected characteristic that is part of one’s identity. All of our employees’ points of view are key to our success, and we embrace individuality.