DevSecOps Engineer: Secure CI/CD & Cloud Automation

Chaos, Inc.; Washington, Northern (District of Columbia, KY); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Health benefits

401k match

Relocation assistance

Unlimited PTO

No meeting Fridays

Free daily lunch

Job summary

CHAOS Industries is seeking a DevSecOps Engineer to weave security into every layer of the software delivery lifecycle. You’ll own CI/CD security, automate compliance and vulnerability checks, and harden cloud and on‑premise environments.

Work with engineers to keep development fast without compromising security. You’ll operate across classified and unclassified environments, drive shift-left security, and build scalable security automation with policy-as-code and evidence collection for RMF/ATO

Qualifications

• Bachelor’s degree or equivalent experience in a technical field.
• 4–7 years in DevOps, software engineering, or cybersecurity with hands-on CI/CD security.
• Experience integrating security tooling into pipelines and cloud environments.
• Eligibility for Security Clearance.

Responsibilities

• Design, implement, and maintain secure CI/CD pipelines with automated security scanning.
• Automate compliance controls and vulnerability checks within pipelines and infra workflows.
• Collaborate with engineers to remediate vulnerabilities and promote secure coding.
• Manage container security posture and Kubernetes security configurations.
• Design infrastructure-as-code with integrated security controls and secrets management.

Skills

CI/CD security

Security tooling integration

Threat modeling

Scripting (Python/Bash/Go)

Container security

Cloud security

Security automation

Security clearance readiness

Education

Bachelor’s degree in Computer Science / Software Engineering / Cybersecurity

Tools

GitHub Actions

GitLab CI

Jenkins

SAST/DAST/SCA tools (SonarQube, Checkmarx, Snyk, OWASP ZAP)

Kubernetes

Terraform / Ansible

OC/OPA policy engines

Job description

CHAOS Industries is seeking a DevSecOps Engineer to weave security into every layer of the software delivery lifecycle. You’ll own CI/CD security, automate compliance and vulnerability checks, and harden cloud and on‑premise environments.

Work with engineers to keep development fast without compromising security. You’ll operate across classified and unclassified environments, drive shift-left security, and build scalable security automation with policy-as-code and evidence collection for RMF/ATO