Description:
About Apavo
Apavo is a woman-owned cybersecurity company supporting Department of Defense and Intelligence Community missions. We're a small, dedicated team where your expertise is valued and your work directly supports national security.
About the Role
Apavo is hiring a DevSecOps Engineer to build and verify hardened software releases for an Intelligence Community AI program. You'll own the secure pipeline that turns code into trusted, deployable containers.
What You'll Do
- Build and maintain secure CI/CD pipelines that produce hardened, digest-pinned container images.
- Generate SBOMs, run vulnerability scans, and produce signed provenance and attestations for each release.
- Review STIG findings and remediate or document each one.
- Produce release evidence that both machines and security reviewers can read.
- Work with the ISSE to feed release evidence into the authorization package.
Requirements:
Required Qualifications
- Active TS/SCI clearance.
- 8+ years in DevSecOps, build and release engineering, or application security.
- Hands-on experience with container builds, SBOMs, and vulnerability scanning tools.
- Experience applying STIGs and remediating findings.
Preferred Qualifications
- Hardened base images, multi-architecture builds, and artifact signing.
- Experience in IL4 or classified environments.
- A DoD 8570/8140 baseline certification.
Benefits
- Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
- 401(k) with a 3.5% employer match, starting January 1, 2027.
- 20 days of paid time off plus 11 paid federal holidays.
- Up to $3,000 a year in training and certification reimbursement.
- Parking reimbursement.
Apavo is an Equal Opportunity Employer.
