Senior / Staff DevSecOps Engineer

You believe security should be a force multiplier for engineering, not a gatekeeper.

You take ownership end-to-end: from identifying a risk to designing the control to shipping the fix.

You bring high judgment to tradeoffs — you know when to enforce hard controls and when friction kills adoption.

You communicate clearly with both engineers and non-technical stakeholders, and you translate risk into plain language.

You prefer automation over policy: if an engineer has to do something manually to stay secure, you see that as a bug.

You hold a high bar for reliability and auditability in the systems you build.

You're self-directed and thrive in an environment where the function is new and you're defining it.

Experience growing a DSO or security engineering function — expanding scope, tooling, and team.

Familiarity with observability tooling and using it for security signal (we use the LGTM stack).

Background in configuration management tooling (Ansible or similar).

Experience with developer-facing security platforms or internal tooling that improved engineering workflows.

Interest in growing into a lead or manager role as the team scales.

Cloud: AWS (primary), Terraform for IaC, Ansible for configuration management

Containers: Docker, Docker Compose

CI/CD: GitHub Actions

Vulnerability scanning: Trivy

Observability: Grafana, Loki, Tempo, Mimir (LGTM stack)

Alerting / on-call: PagerDuty

Languages in use across engineering: Go, TypeScript/Node, React, Python

This role requires eligibility to obtain and maintain a U.S. Government security clearance. This role may involve work in a controlled environment.

Benefits What's on the table:

Health. Medical, dental, and vision plan options. Life / AD&D, disability coverage options.

Family. Paid parental leave for eligible full-time employees. 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.

Vacation. Paid holidays and flexible PTO. Take what you need.

Retirement. 401(k) with pre-tax and Roth options. HSA/FSA options, dependent care FSA.

Benefits vary by location, role, and eligibility. Full plan details provided during the interview and offer process.

If this role sounds like you, apply and share with us your interest

Due to U.S. government contract and security requirements, this role is limited to U.S. citizens. Some positions may also require eligibility to obtain and maintain a U.S. Government security clearance. Any active clearance requirement will be listed in the role description.

Twenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status, consistent with applicable law.

If you need a reasonable accommodation during the hiring process, let us know and we will work with you.