Senior DevSecOps Engineer: Cloud Security & CI/CD

twenty; New York (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health insurance

Family benefits (parential leave)

Paid vacation & holidays

401(k) retirement plan

Job summary

Twenty Technologies seeks an experienced DevSecOps Security Engineer to own runtime security, IAM, secrets, and CI/CD hardening across AWS. You’ll embed with engineering teams, implement secure-by-default foundations, and automate security to keep velocity. You’ll report to the VP of Engineering and help shape the DSO function as we scale.

We value hands-on expertise, incident response leadership, and the ability to translate risk into actionable guidance for engineers and stakeholders.

Qualifications

• 8+ years in DevSecOps, platform security, or security engineering.
• Deep hands-on experience with AWS — IAM, SCPs, Organizations, security services.
• Strong IaC experience with Terraform; policy-as-code tooling or continuous compliance checks.
• Experience owning secrets management end-to-end.
• Proven track record designing and hardening CI/CD pipelines (GitHub Actions).
• Hands-on experience with container security and runtime controls.
• Experience leading or contributing to a compliance program; CMMC 2/NIST 800-171 preferred.
• Incident response experience; on-call, post-mortems, and remediation shipped.
• Strong communication skills to enable security adoption.

Responsibilities

• Own runtime security and vulnerability management across cloud and container environments.
• Design and enforce IAM across AWS and internal systems—least-privilege by default.
• Own secrets and credentials management: policies, tooling, rotation, and workflows.
• Lead security incident response: detection, containment, root cause analysis, remediation.
• Manage AWS Organization structure, account boundaries, SCPs, and guardrails.
• Harden and maintain CI/CD pipelines with security scanning and policy enforcement.
• Drive compliance efforts—evidence, controls, remediation work.
• Build and maintain secure-default templates for repos, pipelines, and infrastructure modules.
• Reduce friction through automation: certificate issuance, secrets access, policy-as-code.
• Produce lightweight security guidance engineers actually use.
• Shape the DSO function direction and assist hiring as we grow.

Skills

DevSecOps

AWS

IaC (Terraform)

Secrets management

CI/CD pipelines

Container security

Compliance programs

Incident response

Communication

Tools

Terraform

Ansible

GitHub Actions

Trivy

Grafana

Loki

Tempo

Mimir

PagerDuty

Job description

Twenty Technologies seeks an experienced DevSecOps Security Engineer to own runtime security, IAM, secrets, and CI/CD hardening across AWS. You’ll embed with engineering teams, implement secure-by-default foundations, and automate security to keep velocity. You’ll report to the VP of Engineering and help shape the DSO function as we scale.

We value hands-on expertise, incident response leadership, and the ability to translate risk into actionable guidance for engineers and stakeholders.