← All roles

Software Engineer, DevSecOps

Helsing· AI & Engineering
Apply on company site
Washington, DCFull-timePosted 2mo ago

About the role

Security-focused engineer building secure CI/CD pipelines and embedding security into the developer platform and software delivery pipeline to achieve compliance (CMMC Level 2, NIST, and related frameworks) and support ATO.

Responsibilities

  • Deploying, updating, and securing Kubernetes workloads through ArgoCD and GitOps workflows
  • Building and maintaining secure CI/CD pipelines that enforce policy, scan for vulnerabilities, and produce auditable build artifacts
  • Maintaining and hardening shared services (GitLab, Artifactory, container registries) that the entire organization depends on
  • Implementing and enforcing security controls aligned with CMMC L2, NIST 800-171, and other frameworks required for ATO
  • Securing the software supply chain: image signing, SBOM generation, dependency scanning, and provenance tracking
  • Conducting threat modeling to surface architectural risks before they become incidents
  • Detecting, investigating, and responding to security incidents across infrastructure and applications
  • Working with product teams to ensure their workloads meet security and compliance requirements before and after deployment
  • Supporting the secure hosting of ML/AI workloads, including model training environments and sensitive data handling

Qualifications

  • 5+ years of experience in DevSecOps, security engineering, or infrastructure engineering with a security focus
  • Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related field
  • Deep experience with Kubernetes—deployment, networking, RBAC, pod and cluster security, and operational troubleshooting
  • Proficiency with ArgoCD or similar GitOps tooling for managing Kubernetes workloads at scale
  • Strong experience writing and maintaining Helm charts
  • Proficiency in Python and Bash, with experience automating security and compliance workflows
  • Understanding of software supply chain security, including container image hardening, FIPS-validated cryptography, vulnerability scanning, SBOM, and artifact signing
  • Hands-on experience implementing security controls from frameworks like NIST 800-171, NIST 800-53, or CMMC
  • Comfort with CI/CD pipeline design, security gates, policy-as-code, and automated compliance checks
  • Working knowledge of AWS and collaboration on infrastructure decisions
  • U.S. citizenship required

Skills

Required:Kubernetes securityArgoCDHelmPythonBashSecurity frameworks

Benefits

  • Generous compensation and benefits package including medical and travel insurance
  • Flexible paid time off, paid holidays
  • Remote and/or hybrid work options depending on position
Last updated Sep 1, 2026. Interested? Apply on the company site.

About Helsing

Helsing | Artificial intelligence to protect our democracies

AI for electronic warfareAI-enabled precision mass and autonomous systemsAutonomous air dominanceMass defence manufacturingRecce strike softwareUnderwater autonomous massliquid-ai-recruiting-target
Company profileWebsite

More open roles at Helsing