Software Engineer, DevSecOps

Apex; Los Angeles (CA); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Shared upside equity

Healthcare—100% company-paid medical/d

Job summary

Apex is building advanced satellite buses and is seeking a DevSecOps professional to design, develop, and own the software infrastructure that enables secure, auditable builds across embedded software, flight software, and internal tooling. You will lead CI/CD pipelines, container image creation, and SBOM generation while coordinating with software and hardware teams in a fast-paced aerospace environment.

This role is based in Playa Vista, CA, with opportunities to shape security across the

Qualifications

• U.S. Person status required due to export-controlled data.
• 4+ years hands-on experience in DevOps, platform/DevSecOps, or cloud infrastructure roles.
• Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience.
• Strong proficiency building and maintaining CI/CD pipelines in GitHub Actions.
• Hands-on experience with Docker and container development—building, hardening, and optimizing images.
• Experience with secure container, SBOM, and scanning tools (e.g., Chainguard, JFrog Xray, Binarly).
• Experience with artifact management (JFrog Artifactory).

Responsibilities

• Build and maintain CI/CD pipelines across languages, primarily in GitHub Actions.
• Develop and optimize containerized build and test workflows; own base images, build caching, and artifact management (JFrog Artifactory).
• Own the secure container supply chain: harden base images, manage trusted registries, and integrate image scanning into every build.
• Automate SBOM generation and vulnerability/license scanning across artifacts and container images.
• Own static analysis tooling and surface findings in a digestible, automated way.
• Code Signing: own code-signing infrastructure and verification workflows.
• Build lightweight internal solutions — policy-as-code, custom scanners, CI/CD integrations — for automatic security/compliance.
• Partner with software engineers to triage vulnerabilities; champion secure coding/training.
• Work with embedded, ground, and infrastructure teams to embed security into CI/CD pipelines.

Skills

DevSecOps

CI/CD

Threat modeling

Developer security training

Education

Bachelor's degree in Computer Science or Electrical Engineering

Tools

GitHub Actions

Docker

JFrog Artifactory

JFrog Xray

Chainguard

Binarly

Klocwork

Job description

Spacecraft represent the most pressing unmet need across the entire aerospace industry. As more launch vehicles come online and the cost to orbit decreases, more companies launching payloads to space continue to emerge.

For the first time in history, this influx of payload companies combined with reduced launch costs has resulted in a massive increase in need for commercial spacecraft platforms, known as satellite buses. These buses hold the payloads of our customers and are flown on launch vehicles.

Apex manufactures these satellite buses at scale using a combination of software, vertical integration, and hardware that is designed for manufacturing. Our spacecraft enable the future of society: ranging from earth observation to communications and more.

We’d love for you to join us on our mission of providing humankind access to the galaxy beyond our planet.

About the Role

As a key member of the integrated solutions software team, you will design, develop, and own the software infrastructure that lets Apex teams move faster, scale, and keep delivering reliable products. You will build the critical systems that automate software builds, container image creation, security scanning, and SBOM generation across embedded software, flight software, and internal tooling — making security and compliance automatic, auditable, and invisible.

Responsibilities:

• Build and maintain CI/CD pipelines across a range of languages and functions, primarily in GitHub Actions.
• Develop and optimize containerized build and test workflows; own base images, build caching, and artifact management (JFrog Artifactory).
• Own the secure container supply chain: harden base images, manage trusted registries, and integrate image scanning into every build.
• Automate SBOM generation and vulnerability/license scanning (e.g., JFrog Xray) across artifacts and container images, delivering results back to software teams in a clear, actionable, automated format.
• Own static analysis tooling (e.g., Black Duck, Klocwork) and surface findings in a digestible, automated way.
• Code Signing: Own code-signing infrastructure and verification workflows that guarantee the authenticity and integrity of Apex software
• Build lightweight internal solutions — policy-as-code, custom scanners, CI/CD integrations — that make security and compliance automatic and auditable.
• Partner with software engineers to identify, triage, and remediate application security vulnerabilities; champion secure coding, threat modeling, and developer security training.
• Work with embedded, ground, and infrastructure teams to embed security principles directly into CI/CD pipelines.

Requirements:

• U.S. Person status — this role requires access to export-controlled data.
• 4+ years of hands-on experience in DevOps, platform / DevSecOps, or cloud infrastructure roles.
• Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience.
• Strong proficiency building and maintaining CI/CD pipelines in GitHub Actions.
• Hands-on experience with Docker and container development — building, hardening, and optimizing images.
• Experience with secure container, SBOM, and scanning tools (e.g., Chainguard, JFrog Xray, Binarly).
• Experience with artifact management (JFrog Artifactory).

Nice to Have

• Experience with container orchestration (Kubernetes).
• Working knowledge of Linux and system administration.
• Experience with cloud infrastructure (AWS preferred), networking, and services.
• Familiarity with static analysis tooling (Black Duck, Klocwork).

Why Join Apex?

Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.

What We Offer For Full-time Employees:

• Shared upside: Receive equity in Apex, letting you benefit from the work you create
• Best-in-class healthcare: 100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost
• Comprehensive PTO package to reset and recharge - starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays
• Competitive 401(k) plan with generous matching - 100% match on first 3%, 50% on next 2%
• 8 weeks paid parental leave plus childcare reimbursement up to $350/day for work‑related travel
• Daily catered lunch and unlimited snacks to keep you fueled throughout the day
• Vibrant community: Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family
• Your dream desk setup and all the tools you need to be your most productive self
• World-class Playa Vista office with the benefit of in‑person collaboration with amazing coworkers and flexibility to integrate work and life
• Real impact opportunity: Work alongside experts from aerospace, new space, and other cutting‑edge industries to make a lasting difference

Ready to join a team where your contributions matter and your future is bright? Let's build something extraordinary together.

Equal Opportunity Employer

Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.