DevSecOps Engineer (IT)

DevSecOps Engineer – CHAOS Industries

($110k - $160k / year)

Los Angeles

Role Overview

We’re hiring a DevSecOps Engineer to embed security into every layer of our development and infrastructure lifecycle. You’ll own CI/CD security, automate compliance, harden cloud/on‑prem environments, and drive shift‑left security across both classified and unclassified programs.

You’ll work closely with engineering, cloud, and cybersecurity teams - keeping delivery fast while strengthening our security posture. From day one, you’ll own our security toolchain and lead automation efforts that reduce risk and accelerate development.

What You’ll Do

• Build and maintain secure CI/CD pipelines (SAST, DAST, SCA, secrets scanning).

• Automate compliance tasks (STIG/SRG checks, ACAS/Nessus, policy‑as‑code).

• Work with engineers on vulnerability triage and secure coding practices.

• Manage container and Kubernetes security (RBAC, PSA, network policies).

• Maintain IaC with built‑in security (Terraform, CloudFormation, Ansible).

• Support RMF/ATO through automated evidence and continuous monitoring.

• Track pipeline health, security metrics, and produce actionable reports.

• Align DevSecOps practices with CMMC Level 2/3 and DFARS requirements.

• Evaluate new tools, document workflows, and strengthen security automation.

• Travel up to 15% for integrations and customer engagements.

Minimum Requirements

• Bachelor’s degree or equivalent experience.

• 4–7 years in DevOps, software engineering, or cybersecurity.

• Experience integrating security into CI/CD pipelines.

• Proficiency in Python, Bash, Go, or similar.

• Hands‑on with Docker, Kubernetes, and container security.

• Knowledge of AWS GovCloud or Azure Government (IAM, NSGs, monitoring).

• Familiarity with SAST/DAST/SCA tools.

• Active Secret clearance; TS/SCI preferred.