Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

Tailor your resume to this Senior/Staff DevSecOps Engineer role.

Rezi rewrites your resume against Twenty's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Senior/Staff DevSecOps Engineer posting at Twenty — free, in seconds.

About the Role

Build and own the security infrastructure that keeps Twenty's engineering systems safe without slowing engineers down. This role spans runtime security, access control, secrets management, compliance, and CI/CD hardening, while making security the path of least resistance. You will embed with engineering teams, design secure-by-default foundations, and build tooling and automation to allow developers to move fast without cutting corners. You will report directly to the VP of Engineering and operate as a shared function across product teams.

Responsibilities

Own runtime security and vulnerability management across cloud and container environments, including triage, prioritization, and remediation tracking.
Design and enforce identity and access management (IAM) across AWS and internal systems with least-privilege by default.
Own secrets and credentials management: policies, tooling, rotation, and developer workflows.
Lead security incident response: detection, containment, root cause analysis, and durable remediation.
Manage AWS Organization structure, account boundaries, SCPs, and guardrails.
Harden and maintain CI/CD pipelines, embedding security scanning and policy enforcement into the software delivery lifecycle.
Drive compliance efforts — own the evidence, controls, and remediation work to meet and maintain relevant frameworks.
Build and maintain secure-by-default templates for repos, pipelines, and infrastructure modules.
Reduce friction through automation: certificate issuance, secrets access, policy-as-code, and developer-facing tooling.
Produce lightweight, practical security guidance that engineers actually use.
Shape the direction of the DSO function as it scales, and contribute to hiring and team-building.

Requirements

8+ years in DevSecOps, platform security, or a closely related security engineering role.
Deep hands-on experience with AWS — IAM, SCPs, Organizations, security services (GuardDuty, Security Hub, CloudTrail, etc.).
Strong IaC experience with Terraform; used to enforce security controls and layered with policy-as-code tooling (e.g., OPA, Checkov, tfsec) or continuous compliance checks (e.g., AWS Config Rules).
Experience owning secrets management end-to-end in a production engineering environment.
Proven track record designing and hardening CI/CD pipelines (GitHub Actions).
Hands-on experience with container security, including image scanning and runtime controls.
Experience leading or meaningfully contributing to a compliance program; CMMC Level 2 (or NIST SP 800-171) experience strongly preferred.
Experience running incident response — on call, leading post-mortems, and shipping fixes.
Strong communication skills and the ability to drive security adoption through enablement, not mandates.
Experience growing a DSO or security engineering function — expanding scope, tooling, and team.
Familiarity with observability tooling and using it for security signal (LGTM stack).
Background in configuration management tooling (Ansible or similar).
Experience with developer-facing security platforms or internal tooling that improved engineering workflows.
Interest in growing into a lead or manager role as the team scales.
U.S. Citizenship Required.
Eligibility to obtain and maintain a U.S. Government security clearance.

Skills

AWS IAM
AWS SCPs
AWS Organizations
AWS GuardDuty
AWS Security Hub
AWS CloudTrail
Terraform
Policy-as-code
OPA
Checkov
tfsec
AWS Config Rules
Secrets management
CI/CD hardening
GitHub Actions
Container security
Image scanning
Runtime controls
Compliance programs
CMMC Level 2
NIST SP 800-171
Incident response
Communication skills
Observability tooling
LGTM stack
Ansible
Developer-facing security platforms
Internal tooling

Location

Arlington, Virginia

Work Type

On Site
Full Time

Experience Level

8+ years

Benefits

Medical, dental, and vision plan options.
Life / AD&D, disability coverage options.
Paid parental leave for eligible full-time employees (12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy).
Paid holidays and flexible PTO.
401(k) with pre-tax and Roth options.
HSA/FSA options, dependent care FSA.

About the Company

America is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned—correctly—that those attacks rarely produce consequences.
Twenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace—a future where they cannot contest us, deterrence is assured, and the free world remains secure.
Founded in 2024, Twenty Technologies (www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends & Family Capital, Point72 Ventures, General Catalyst, and In-Q-Tel.

Equal Opportunity

Twenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status, consistent with applicable law.
If you need a reasonable accommodation during the hiring process, let us know and we will work with you.