Software Engineer, DevSecOps

EngineersOfAI; Washington (District of Columbia); On-site; USD 110,000 - 130,000; Full time

Job summary

EngineersOfAI in Washington DC is seeking a security-focused engineer to enhance security across its developer platform and software delivery pipeline. The successful candidate will ensure compliance with CMMC Level 2 and build secure CI/CD pipelines while collaborating with various teams.

This role demands a blend of hands-on engineering and deep security knowledge, requiring the candidate to both audit compliance and design systems that ensure it automatically.

Qualifications

• Experience with Kubernetes workload deployment and security.
• Knowledge of CI/CD pipeline dynamics and security best practices.
• Familiarity with cybersecurity compliance frameworks.

Responsibilities

• Embed security into all layers of the developer platform.
• Ensure CMMC Level 2 compliance and harden the software supply chain.

Skills

Kubernetes

CI/CD pipelines

Security compliance

Policy as code

Cybersecurity frameworks

Job description

Who we are

Helsing develops artificial intelligence-enabled capabilities to protect and defend democracies.We build Altra, an AI-powered drone software platform, and HX-2, our autonomous drone. We are growing our US operations, cultivating an ambitious and committed team of mission-driven professionals to apply their skills to solve challenging problems.

The role

You will join the Platform Engineering team as a security-focused engineer responsible for embedding security into every layer of our developer platform and software delivery pipeline. You will own the security posture of our development environment — ensuring CMMC Level 2 compliance, hardening our software supply chain, and implementing the controls required for product teams to achieve ATO against NIST and other cybersecurity frameworks. You will work closely with platform and product engineers to build secure CI/CD pipelines, enforce policy-as-code, andmaintainthe shared infrastructure that all teams depend on. This role combines hands-on engineering with deep securityexpertise: you are not just auditingcompliance,you are building the systems that make compliance automatic.

The day-to-day

• Deploying, updating, and securing Kubernetes workloads throughArgoCDandGitOpsworkflows
• Building andmaintainingsecure CI/CD pipelines that enforce policy, scan for vulnerabilities, and produce auditable build artifacts