DevSecOps Engineer — Secure CI/CD & Cloud Automation

CHAOS Industries; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits

401k with company match

Free daily lunch

Unlimited PTO

Relocation assistance

Job summary

CHAOS Industries is hiring a DevSecOps Engineer to embed security across the software development and infrastructure delivery lifecycle. This hands-on role owns CI/CD security, automates compliance checks, hardens cloud and on‑prem environments, and partners with development and operations teams to make “secure by default” a reality.

You’ll work across classified and unclassified environments with engineers, cloud architects, ISSMs, and platform teams to keep the pipeline fast and secure.

Qualifications

• Bachelor’s degree in Computer Science, Software Engineering, Cybersecurity, or a related technical field.
• Equivalent experience considered.
• 4–7 years of experience in DevOps, software engineering, or cybersecurity, with hands‑on security tooling in CI/CD and cloud environments.
• Proficiency in at least one scripting or programming language (Python, Bash, Go, or equivalent).
• Hands‑on experience with container technologies (Docker, Kubernetes) including security hardening and runtime protection.
• Experience with cloud security on AWS GovCloud or Azure Government including IAM and network security.
• Familiarity with SAST, DAST, and SCA tooling and integration into pipelines.
• Eligibility for Security Clearance.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines with automated security scanning (SAST/DAST/SCA, secrets) across workflows.
• Automate security and compliance controls including STIG/SRG validation and vulnerability scanning.
• Collaborate with engineers to remediate vulnerabilities and promote secure coding practices.
• Manage container security posture including image hardening and Kubernetes configurations.
• Design and maintain infrastructure‑as‑code with security controls; enforce least‑privilege and secrets management.
• Support RMF/ATO activities with automated evidence collection and monitoring artifacts.
• Monitor tooling telemetry and produce remediation backlogs for leadership.
• Coordinate with ISSM/ISSO and ensure alignment with DFARS and CMMC controls.
• Evaluate new DevSecOps tooling and produce internal docs and runbooks.
• Travel up to 15% CONUS for site integrations and security reviews.

Skills

Security automation

Cloud security

Threat modelling

Scripting (Python)

Education

Bachelor’s degree in CS/SE/Cybersecurity

Tools

GitHub Actions

GitLab CI

Jenkins

Job description

CHAOS Industries is hiring a DevSecOps Engineer to embed security across the software development and infrastructure delivery lifecycle. This hands-on role owns CI/CD security, automates compliance checks, hardens cloud and on‑prem environments, and partners with development and operations teams to make “secure by default” a reality.

You’ll work across classified and unclassified environments with engineers, cloud architects, ISSMs, and platform teams to keep the pipeline fast and secure.