DevSecOps Engineer: Secure CI/CD & Cloud Automation

Chaos Industries; Washington; On-site; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits & 401k match

Job summary

CHAOS Industries is hiring a DevSecOps Engineer to embed security into every layer of our software development and infrastructure delivery lifecycle.

This is a broad, hands‑on engineering role; you’ll own CI/CD pipeline security, automate compliance and vulnerability checks, harden cloud and on‑premise environments, and partner with development and operations teams to make "secure by default" a reality, not a checkbox.

Qualifications

• Bachelor’s degree in CS, software engineering, cybersecurity, or related field.
• 4–7 years in DevOps, software or cybersecurity with hands-on CI/CD security tooling.
• Proficiency in Python, Bash, Go or equivalent for automation.
• Hands-on experience with Docker and Kubernetes in a production environment.
• Working knowledge of cloud security on AWS GovCloud or Azure Government.
• Familiar with SAST, DAST, and SCA tools and their integration into automated pipelines.
• Eligibility for Security Clearance.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines with automated security scanning (SAST, DAST, SCA, secrets) across development workflows.
• Automate security and compliance controls including validation and policy enforcement within pipelines and infra workflows.
• Collaborate with engineers to identify, triage, and remediate vulnerabilities; promote secure coding practices.
• Build and manage container security posture including image hardening and runtime protection.
• Design and maintain infrastructure-as-code with integrated security controls and secrets management.
• Support RMF/ATO activities by automating evidence collection and monitoring artifacts.
• Monitor tooling telemetry, dashboards, and vulnerability metrics; produce remediation backlogs.
• Coordinate with ISSM/ISSO teams to align DevSecOps with CMMC/DFARS requirements.
• Evaluate new DevSecOps tooling; produce runbooks and playbooks for security automation.
• Travel up to 15% CONUS.

Skills

Python

Automation

Security tooling

CI/CD

Cloud security

Education

Bachelor's degree in CS/Software/Cybersecurity

Tools

Docker

Kubernetes

SAST/DAST/SCA tools

SonarQube

Checkmarx

Snyk

OWASP ZAP

Black Duck

Job description

CHAOS Industries is hiring a DevSecOps Engineer to embed security into every layer of our software development and infrastructure delivery lifecycle.

This is a broad, hands‑on engineering role; you’ll own CI/CD pipeline security, automate compliance and vulnerability checks, harden cloud and on‑premise environments, and partner with development and operations teams to make "secure by default" a reality, not a checkbox.