DevSecOps/Container Security Engineer

About Apavo 

Apavo is a woman-owned cybersecurity company supporting Department of Defense and Intelligence Community missions. We're a small, dedicated team where your expertise is valued and your work directly supports national security. 

About the Role 

Apavo is hiring a DevSecOps Engineer to build and verify hardened software releases for an Intelligence Community AI program. You'll own the secure pipeline that turns code into trusted, deployable containers. 

What You'll Do 

• Build and maintain secure CI/CD pipelines that produce hardened, digest-pinned container images. 
• Generate SBOMs, run vulnerability scans, and produce signed provenance and attestations for each release. 
• Review STIG findings and remediate or document each one. 
• Produce release evidence that both machines and security reviewers can read. 
• Work with the ISSE to feed release evidence into the authorization package. 

Required Qualifications 

• Active TS/SCI clearance. 
• 8+ years in DevSecOps, build and release engineering, or application security. 
• Hands-on experience with container builds, SBOMs, and vulnerability scanning tools. 
• Experience applying STIGs and remediating findings. 

Preferred Qualifications 

• Hardened base images, multi-architecture builds, and artifact signing. 
• Experience in IL4 or classified environments. 
• A DoD 8570/8140 baseline certification. 

Benefits 

• Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027. 
• 401(k) with a 3.5% employer match, starting January 1, 2027. 
• 20 days of paid time off plus 11 paid federal holidays. 
• Up to $3,000 a year in training and certification reimbursement. 
• Parking reimbursement. 

Apavo is an Equal Opportunity Employer.