DevSecOps Engineer - Secure CI/CD & Cloud Automation

Socket.dev; Washington (District of Columbia); On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits

401k match

Free daily lunch

Unlimited PTO

Relocation assistance

Job summary

CHAOS Industries is hiring a DevSecOps Engineer to embed security across the software development and delivery lifecycle. You will own CI/CD security, automate compliance checks, and harden cloud and on-premise environments while partnering with engineering and operations teams to make secure-by-default a reality.

You’ll lead security toolchains in CI/CD pipelines, drive shift-left security, and streamline evidence collection for RMF/ATO across classified and unclassified environments.

Qualifications

• Bachelor’s degree in a technical field or equivalent experience.
• 4–7 years of hands-on DevOps, software eng., or cybersecurity with security tooling in CI/CD and cloud environments.
• Proficiency in scripting languages used for automation and tooling.
• Hands-on experience with container technologies and security hardening.
• Experience with cloud security on AWS GovCloud or Azure Government and IAM, network security, secrets management.
• Familiarity with SAST/DAST/SCA tools and CI/CD integrations.
• Eligibility for Security Clearance.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines with automated security scanning across workflows.
• Automate security and compliance controls (STIG/SRG, vulnerability scanning, policy-as-code).
• Collaborate with engineers to triage and remediate vulnerabilities; promote secure coding practices.
• Build and manage container security posture (image hardening, runtime protection, Kubernetes configs).
• Design and maintain infrastructure-as-code with integrated security controls; enforce least-privilege.
• Support RMF/ATO activities; automate evidence collection and continuous monitoring for cloud/on-prem environments.
• Monitor tooling telemetry, dashboards, and provide remediation backlogs to leadership.
• Coordinate with ISSM/ISSO and ensure DevSecOps aligns with CMMC/DFARS controls.
• Evaluate new DevSecOps tooling; create playbooks and runbooks for automation.
• Travel up to 15% CONUS for site integrations and reviews.

Skills

Security automation

Scripting (Python/Bash/Go)

Threat modeling

Compliance automation

Education

Bachelor’s degree in Computer Science / Software Engineering / Cybersecurity

Tools

Docker

Kubernetes

GitHub Actions

GitLab CI

Jenkins

Job description

CHAOS Industries is hiring a DevSecOps Engineer to embed security across the software development and delivery lifecycle. You will own CI/CD security, automate compliance checks, and harden cloud and on-premise environments while partnering with engineering and operations teams to make secure-by-default a reality.

You’ll lead security toolchains in CI/CD pipelines, drive shift-left security, and streamline evidence collection for RMF/ATO across classified and unclassified environments.