Platform Security Engineer: DevSecOps (Remote)

Helsing; Washington (District of Columbia); Hybrid; USD 150,000 - 210,000; Full time

Benefits offered by this job

Remote/hybrid work

Medical & travel insurance

Paid time off

Equal opportunity employer

Job summary

Helsing is expanding its US operations and seeks a security-focused Platform Engineer to embed security across the development and delivery pipeline. You will own the security posture of the development environment and drive compliance with NIST/CMMC while building secure CI/CD practices.

You will work with Kubernetes, ArgoCD, GitOps, and shared services to enforce compliance, ship verifiable artifacts, and strengthen the software supply chain across the organization.

Qualifications

• 5+ years of experience in DevSecOps, security engineering, or infrastructure engineering with a security focus
• Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field
• Deep experience with Kubernetes - deployment, networking, RBAC, pod and cluster security, and operational troubleshooting
• Proficiency with ArgoCD or similar GitOps tooling for managing Kubernetes workloads at scale
• Strong experience writing and maintaining Helm charts
• Proficiency in Python and Bash, with experience automating security and compliance workflows
• Understand software supply chain security, including container image hardening, FIPS-validated cryptography, vulnerability scanning, SBOM, and artifact signing
• Hands-on experience implementing security controls from frameworks like NIST 800-171, NIST 800-53, or CMMC
• Comfort with CI/CD pipeline design, particularly building in security gates, policy-as-code, and automated compliance checks
• Working knowledge of AWS and collaboration on infrastructure decisions
• A U.S. citizen eligible to obtain a security clearance

Responsibilities

• Deploying secure Kubernetes workloads via ArgoCD and GitOps workflows
• Building and maintaining secure CI/CD pipelines that enforce policy, scan for vulnerabilities, and produce auditable build artifacts
• Hardening shared services (GitLab, Artifactory, container registries) used across the organization
• Enforcing security controls aligned with CMMC L2, NIST 800-171, and other ATO frameworks
• Securing the software supply chain: image signing, SBOM generation, dependency scanning, provenance tracking
• Conducting threat modeling to surface architectural risks before incidents
• Detecting, investigating, and responding to security incidents across infrastructure and applications
• Collaborating with product teams to ensure workloads meet security and compliance requirements before and after deployment
• Supporting secure hosting of ML/AI workloads, including model training environments and sensitive data handling

Skills

DevSecOps

Security engineering

Kubernetes

ArgoCD

GitOps

Python

Bash

CI/CD pipelines

Policy-as-code

AWS

Security compliance

Threat modeling

Education

Bachelor's degree in Computer Science, Engineering, Cybersecurity

Tools

GitLab

Artifactory

Container registries

Helm

SBOM tooling

Image signing

Terraform

Nix

Job description

Helsing is expanding its US operations and seeks a security-focused Platform Engineer to embed security across the development and delivery pipeline. You will own the security posture of the development environment and drive compliance with NIST/CMMC while building secure CI/CD practices.

You will work with Kubernetes, ArgoCD, GitOps, and shared services to enforce compliance, ship verifiable artifacts, and strengthen the software supply chain across the organization.