Senior DevSecOps Engineer: AWS IAM & CI/CD Security

Twenty; New York (NY); On-site; USD 159,000 - 263,000; Full time

Benefits offered by this job

Health, dental, vision

401(k) with pre-tax

Paid holidays and flexible PTO

Parental leave

Job summary

Twenty is seeking a senior security engineer to own and evolve Twenty's runtime security, IAM, secrets management, and CI/CD hardening across AWS and internal systems. You will work closely with engineering teams to instill secure-by-default foundations, build tooling, and automate workflows that keep developers moving fast while maintaining strong security controls.

As a key member of the DSO function, you will drive incident response, compliance, and policy enforcement, shaping security

Qualifications

• 8+ years in DevSecOps or security engineering.
• Deep hands-on AWS experience: IAM, SCPs, Organizations.
• Strong IaC with Terraform; policy-as-code tooling (OPA, Checkov, tfsec).
• Experience owning secrets management end-to-end.
• Proven CI/CD experience with secure pipelines (GitHub Actions).

Responsibilities

• Own runtime security and vulnerability management across cloud and container environments.
• Design and enforce IAM across AWS and internal systems with least privilege.
• Manage secrets and credentials policies, tooling, rotation.
• Lead security incident response: detection, containment, root-cause analysis.
• Harden CI/CD pipelines and embed security scans.
• Drive compliance efforts with evidence, controls, and remediation work.
• Build secure-by-default templates for repos and infrastructure modules.
• Automate friction reduction: certificates, secrets access, policy-as-code.
• Produce practical security guidance for engineers.
• Shape DSO function direction and contribute to hiring.

Skills

DevSecOps

AWS IAM

Terraform IaC

Secrets mgmt

CI/CD pipelines

Container security

Incident response

Communication

Tools

Terraform

Ansible

GitHub Actions

Docker

Trivy

Grafana

Loki

Tempo

Job description

Twenty is seeking a senior security engineer to own and evolve Twenty's runtime security, IAM, secrets management, and CI/CD hardening across AWS and internal systems. You will work closely with engineering teams to instill secure-by-default foundations, build tooling, and automate workflows that keep developers moving fast while maintaining strong security controls.

As a key member of the DSO function, you will drive incident response, compliance, and policy enforcement, shaping security