8+ years in DevSecOps, build and release engineering, or application security.
Hands-on experience with container builds, SBOMs, and vulnerability scanning tools.
Experience applying STIGs and remediating findings.
Responsibilities
Build and maintain secure CI/CD pipelines for hardened container images.
Generate SBOMs and run vulnerability scans for each release.
Review STIG findings and document or remediate them.
Produce release evidence for both machines and security reviewers.
Collaborate with ISSE to integrate release evidence into the authorization package.
Benefits
Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
401(k) with a 3.5% employer match, starting January 1, 2027.
20 days of paid time off plus 11 paid federal holidays.
Up to $3,000 a year in training and certification reimbursement.
Parking reimbursement.
Full Job Description
About the Role
Apavo is hiring a DevSecOps Engineer to build and verify hardened software releases for an Intelligence Community AI program. You'll own the secure pipeline that turns code into trusted, deployable containers.
What You'll Do
Build and maintain secure CI/CD pipelines that produce hardened, digest-pinned container images.
Generate SBOMs, run vulnerability scans, and produce signed provenance and attestations for each release.
Review STIG findings and remediate or document each one.
Produce release evidence that both machines and security reviewers can read.
Work with the ISSE to feed release evidence into the authorization package.
Requirements
Required Qualifications
Active TS/SCI clearance.
8+ years in DevSecOps, build and release engineering, or application security.
Hands-on experience with container builds, SBOMs, and vulnerability scanning tools.
Experience applying STIGs and remediating findings.
Preferred Qualifications
Hardened base images, multi-architecture builds, and artifact signing.
Experience in IL4 or classified environments.
A DoD 8570/8140 baseline certification.
Benefits
Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
401(k) with a 3.5% employer match, starting January 1, 2027.
20 days of paid time off plus 11 paid federal holidays.
Up to $3,000 a year in training and certification reimbursement.
