DevSecOps Engineer: Secure CI/CD & SBOM for Spacecraft

Apex Technology, Inc.; Los Angeles (CA); On-site; USD 180,000 - 230,000; Full time

Benefits offered by this job

Equity

Healthcare

PTO 15–20 days

401(k)

Parental leave

Lunch & snacks

Office Playa Vista

Job summary

Apex Technology, Inc. seeks a hands-on DevSecOps engineer to design, develop, and own the software infrastructure that enables faster delivery of secure aerospace software.

You will automate builds, container image creation, security scanning, and SBOM generation across embedded software and internal tooling. You will own the secure container supply chain, implement code signing, and build lightweight policy-as-code solutions while collaborating with embedded, ground, and infrastructure teams to

Qualifications

• U.S. Person status required for export‑controlled data.
• 4+ years in DevOps, platform/DevSecOps, or cloud infrastructure.
• Bachelor’s degree in Computer Science, Electrical Engineering, or equivalent.
• Strong proficiency with CI/CD pipelines in GitHub Actions.
• Hands‑on Docker/container development experience.
• Experience with secure container, SBOM, and scanning tools (Chainguard, JFrog Xray, Binarly).
• Experience with artifact management (JFrog Artifactory).

Responsibilities

• Build and maintain CI/CD pipelines across languages and functions, primarily using GitHub Actions.
• Develop and optimize containerized build/test workflows; manage base images, build caching, and artifact management (JFrog Artifactory).
• Harden base images, manage trusted registries, and integrate image scanning into builds.
• Automate SBOM generation and vulnerability/license scanning; deliver results to software teams in automated format.
• Own static analysis tooling and surface findings in digestible format.
• Collaborate with engineers to triage vulnerabilities and promote secure coding practices.
• Embed security principles into CI/CD pipelines with embedded collaboration across teams.

Skills

CI/CD pipelines

GitHub Actions

Docker/container builds

SBOM & scanning

Security tooling

Code signing & policy

Threat modeling

Education

Bachelor's degree in CS/EE

Tools

GitHub Actions

Docker

JFrog Artifactory

JFrog Xray

Chainguard

Klocwork

Job description

Apex Technology, Inc. seeks a hands-on DevSecOps engineer to design, develop, and own the software infrastructure that enables faster delivery of secure aerospace software.

You will automate builds, container image creation, security scanning, and SBOM generation across embedded software and internal tooling. You will own the secure container supply chain, implement code signing, and build lightweight policy-as-code solutions while collaborating with embedded, ground, and infrastructure teams to