Senior / Staff DevSecOps Engineer

Home > Other programming jobs

Senior / Staff DevSecOps Engineer in USA

Twenty
Full time
Email

USA
09/28/2026
Report

Arlington, VA

Responsibilities

Own runtime security and vulnerability management across cloud and container environments, including triage, prioritization, and remediation tracking.
Design and enforce least-privilege identity and access management across AWS and internal systems.
Own secrets and credentials management, including policies, tooling, rotation, and developer workflows.
Lead security incident response through detection, containment, root cause analysis, and durable remediation.
Manage AWS Organizations, account boundaries, service control policies, and security guardrails.
Harden CI/CD pipelines by embedding security scanning and policy enforcement into software delivery.
Drive compliance programs, including evidence collection, controls, and remediation work.
Build secure-by-default repository, pipeline, and infrastructure templates.
Automate certificate issuance, secrets access, policy-as-code, and developer-facing security tooling.
Create practical security guidance and shape the DevSecOps function as it scales, including contributing to hiring and team-building.

Requirements

8+ years of experience in DevSecOps, platform security, or a closely related security engineering role.
Deep hands-on AWS experience with IAM, SCPs, Organizations, GuardDuty, Security Hub, CloudTrail, and related security services.
Strong Terraform experience for enforcing security controls, plus policy-as-code or continuous compliance tooling such as OPA, Checkov, tfsec, or AWS Config Rules.
End-to-end production experience owning secrets management.
Experience designing and hardening CI/CD pipelines, including GitHub Actions.
Hands-on container security experience, including image scanning and runtime controls.
Experience leading or substantially contributing to a compliance program; CMMC Level 2 or NIST SP 800-171 experience is strongly preferred.
Experience running incident response, participating in on-call operations, leading post-mortems, and shipping remediation.
Strong communication skills and the ability to drive security adoption through enablement.
Experience growing a DevSecOps or security engineering function, familiarity with observability tooling and the LGTM stack, Ansible or similar configuration management experience, and developer-facing security platform experience are preferred.
U.S. citizenship is required, and the candidate must be eligible to obtain and maintain a U.S. Government security clearance.

Benefits

Medical, dental, and vision plan options, plus life/AD&D and disability coverage options.
Paid parental leave for eligible full-time employees, including 12 weeks for birthing parents, 4 weeks for non-birthing parents, and 6 weeks for adoptive, foster, or intended parents through surrogacy.
Paid holidays and flexible PTO.
401(k) with pre-tax and Roth options, HSA/FSA options, and dependent care FSA.
Full-time, onsite role in Arlington, Virginia; benefits vary by location, role, and eligibility.

Salary: $159k - $263k/yr

Twenty

Twenty develops and deploys advanced software solutions tailored for offensive cyber operations, empowering the U.S. and its allies to deter and defeat adversaries in the arena of modern warfare. Our unique approach industrializes cyber capabilities, ensuring that nations can project power and ma...

Similar positions

Quality Engineering Lead

Accenture
Full time

Others
10/02/2026

Cebu City, Philippines

Senior ML Engineer

Axiado
Full time

Others
10/02/2026

Taipei, Taiwan

Senior Web Engineer

Canonical
Full time

Remote
10/02/2026

EMEA

Principal Software Engineer - Platform Infra

Elastic
Full time

Remote
10/02/2026
Salary: €84k-€110k

Greece

Senior SDET - (India)

Welocalize
Full time

Remote
10/02/2026
Salary: USD 13.50 (hourly)

India