Remote DevSecOps Engineer for AI Platform & Secure CI/CD

Helsing GmbH; Washington (District of Columbia); Hybrid; USD 170,000 - 210,000; Full time

Benefits offered by this job

Insurance coverage

Flexible paid time off

Remote/hybrid work

Job summary

Helsing GmbH is seeking a security-focused Platform Engineer to embed security across the developer platform and delivery pipeline. You will own the security posture of the development environment, ensure CMMC Level 2 compliance, harden the software supply chain, and enable product teams to achieve ATO against NIST and other frameworks.

You will build secure CI/CD pipelines, enforce policy-as-code, maintain shared infrastructure like GitLab and artifact registries, and operate with AWS

Qualifications

• 5+ years of DevSecOps, security engineering, or infrastructure engineering with a security focus.
• Bachelor's degree in CS/Engineering/Cybersecurity or related field.
• Deep experience with Kubernetes deployment, networking, RBAC, pod and cluster security.
• Experience with ArgoCD or similar GitOps tools at scale.
• Strong Python and Bash, automating security workflows.
• Knowledge of software supply chain security, image hardening, SBOM, and artifact signing.
• Experience implementing security controls from frameworks like NIST 800-171, NIST 800-53, or CMMC.
• Comfort with CI/CD pipeline design and security gates/policy-as-code.

Responsibilities

• Deploying, updating, and securing Kubernetes workloads through ArgoCD and GitOps workflows
• Building and maintaining secure CI/CD pipelines that enforce policy, scan for vulnerabilities, and produce auditable build artifacts
• Maintaining and hardening shared services (GitLab, Artifactory, container registries) that the organization depends on
• Implementing and enforcing security controls aligned with CMMC L2, NIST 800-171, and other frameworks for ATO
• Securing the software supply chain: image signing, SBOM generation, dependency scanning, provenance tracking
• Conducting threat modeling to surface architectural risks before incidents
• Detecting, investigating, and responding to security incidents across infrastructure and applications
• Working with product teams to ensure workloads meet security and compliance requirements
• Supporting the secure hosting of ML/AI workloads, including model training environments and sensitive data handling

Skills

Kubernetes

ArgoCD

GitOps

Python

Bash

CI/CD

Policy-as-code

NIST 800-171

CMMC

AWS

Education

Bachelor's degree in Computer Science, Engineering, Cybersecurity, or related field

Tools

GitLab

Artifactory

Container Registries

Helm

SBOM tooling

Job description

Helsing GmbH is seeking a security-focused Platform Engineer to embed security across the developer platform and delivery pipeline. You will own the security posture of the development environment, ensure CMMC Level 2 compliance, harden the software supply chain, and enable product teams to achieve ATO against NIST and other frameworks.

You will build secure CI/CD pipelines, enforce policy-as-code, maintain shared infrastructure like GitLab and artifact registries, and operate with AWS