Senior DevSecOps Engineer: Secure Cloud & CI/CD Trailblazer

twenty; Arlington (NY); On-site; USD 180,000 - 240,000; Full time

Benefits offered by this job

Health, dental, vision

Parental leave

Flexible PTO

401(k) with matching

Job summary

Twenty Technologies in Arlington, VA seeks an experienced DevSecOps Engineer to build and own security infrastructure across runtime, IAM, secrets, and CI/CD. You will embed with engineering teams, design secure-by-default foundations, and develop tooling to move fast without compromising security.

You will lead incident response, manage AWS Organization boundaries, and drive compliance across frameworks, while enabling developers with secure templates and automation.

Qualifications

• 8+ years in DevSecOps, platform security, or related security engineering.
• Deep hands-on AWS experience: IAM, SCPs, Organizations, GuardDuty, Security Hub, CloudTrail.
• Terraform used to enforce security controls with policy-as-code tooling.
• Experience owning secrets management end-to-end in production.
• Design and harden CI/CD pipelines (GitHub Actions).
• Container security experience including image scanning and runtime controls.
• Compliance program experience; CMMC 2 or NIST SP 800-171 preferred.
• Incident response lead; on-call, post-mortems, durable fixes.
• Strong communication enabling security adoption over mandates.

Responsibilities

• Own runtime security and vulnerability management in cloud and containers.
• Design and enforce IAM with least-privilege by default across AWS and internal systems.
• Lead secrets management: policies, tooling, rotation, developer workflows.
• Lead security incident response: detection, containment, root-cause analysis, remediation.
• Manage AWS Organization structure, accounts, SCPs, guardrails.
• Harden CI/CD pipelines and embed security scanning into the SDLC.
• Drive compliance evidence, controls, remediation for frameworks.
• Create secure-by-default templates for repos, pipelines, infrastructure modules.

Skills

AWS IAM

SCPs & Organizations

Terraform IaC

Policy-as-code (OPA/ tfsec)

CI/CD security (GitHub Actions)

Secrets management

Incident response

Container security

Security auditing/compliance

Automation & developer enablement

Tools

Terraform

AWS

GitHub Actions

Ansible

Trivy

Job description

Twenty Technologies in Arlington, VA seeks an experienced DevSecOps Engineer to build and own security infrastructure across runtime, IAM, secrets, and CI/CD. You will embed with engineering teams, design secure-by-default foundations, and develop tooling to move fast without compromising security.

You will lead incident response, manage AWS Organization boundaries, and drive compliance across frameworks, while enabling developers with secure templates and automation.