Senior DevSecOps Engineer - Secure Cloud & CI/CD Lead

Twenty; New York (NY); On-site; USD 159,000 - 263,000; Full time

Benefits offered by this job

Health, dental & vision

/parential leave (paid)

Flexible PTO

401(k) with HSA/FSA

Job summary

Twenty seeks a seasoned DevSecOps engineer to build and own the security infrastructure that keeps engineering systems safe without hindering velocity.

You will embed with product teams, enforce least-privilege IAM, manage secrets, and harden CI/CD and runtimes across AWS and internal systems. Reporting to the VP of Engineering, you’ll scale the DSO function and help shape recruiting as we grow.

Qualifications

• 8+ years in DevSecOps, platform security, or related role.
• Deep hands-on AWS experience: IAM, SCPs, Organizations, security services.
• Terraform IaC used to enforce security, with policy-as-code tooling.
• Experience owning secrets management end-to-end.
• Proven track record hardening CI/CD pipelines (GitHub Actions).
• Hands-on container security, image scanning and runtime controls.
• Experience leading or contributing to a compliance program (CMMC/NIST 800-171).
• On-call incident response, post-mortems, and shipping fixes.
• Strong communication to enable security adoption across teams.

Responsibilities

• Own runtime security across cloud/container environments and triage remediation.
• Design and enforce IAM and least-privilege across AWS and internal systems.
• Manage secrets and credentials; build developer-friendly workflows.
• Lead incident response: detection, containment, root-cause analysis, remediation.
• Harden CI/CD pipelines and embed policy enforcement into delivery lifecycle.
• Drive compliance efforts and maintain evidence, controls, remediation.
• Create secure-by-default templates for repos, pipelines, and infra modules.
• Reduce friction via automation: certificates, secrets, policy-as-code.

Skills

DevSecOps

AWS IAM

Terraform IaC

Policy-as-code

CI/CD pipelines

Container security

Incident response

Security compliance

Security tooling

Communication

Tools

Terraform

Ansible

Docker

GitHub Actions

Trivy

Grafana

Loki

Tempo

Mimir

PagerDuty

Job description

Twenty seeks a seasoned DevSecOps engineer to build and own the security infrastructure that keeps engineering systems safe without hindering velocity.

You will embed with product teams, enforce least-privilege IAM, manage secrets, and harden CI/CD and runtimes across AWS and internal systems. Reporting to the VP of Engineering, you’ll scale the DSO function and help shape recruiting as we grow.