Senior DevSecOps Engineer — Secure Cloud & CI/CD Expert

Twenty; Arlington (VA); On-site; USD 159,000 - 263,000; Full time

Benefits offered by this job

Health insurance

Parental leave

Paid holidays

401(k) plan

Job summary

Twenty Technologies, based in Arlington, VA, seeks a security‑focused DevSecOps leader to build our security platform across AWS, CI/CD, and container ecosystems. You will own runtime security, IAM, secrets management, and compliance, embedding security into developer workflows to enable fast delivery.

This on‑site role reports to the VP of Engineering and drives the DSO function as we scale. Applicants must be US citizens, with strong hands-on experience in incident response, IaC (Terraform),

Qualifications

• 8+ years in DevSecOps, platform security, or security engineering.
• Deep hands-on AWS experience: IAM, SCPs, Organizations, GuardDuty, Security Hub.
• Terraform-based IaC with policy-as-code tooling like OPA/Checkov/tfsec.
• Experience owning secrets management in production environments.
• Proven CI/CD security design with GitHub Actions.

Responsibilities

• Own runtime security and vulnerability management across cloud and containers.
• Design IAM with least-privilege by default across AWS and internal systems.
• Own secrets management: policies, tooling, rotation and developer workflows.
• Lead incident response: detection, containment, root-cause, remediation.
• Harden CI/CD pipelines and enforce security in the delivery lifecycle.
• Drive compliance efforts and maintain security evidence and controls.
• Build secure-by-default templates for repos, pipelines, and infra modules.
• Reduce friction through automation and developer-facing tooling.
• Shape the DSO function's direction as the team grows.

Skills

AWS IAM

SCPs

Organizations

GuardDuty

Security Hub

CloudTrail

Terraform

Policy-as-code

GitHub Actions

CI/CD security

Container security

Incident response

Compliance programs

Tools

Terraform

Ansible

Docker

GitHub Actions

Trivy

Grafana

Loki

Tempo

Job description

Twenty Technologies, based in Arlington, VA, seeks a security‑focused DevSecOps leader to build our security platform across AWS, CI/CD, and container ecosystems. You will own runtime security, IAM, secrets management, and compliance, embedding security into developer workflows to enable fast delivery.

This on‑site role reports to the VP of Engineering and drives the DSO function as we scale. Applicants must be US citizens, with strong hands-on experience in incident response, IaC (Terraform),