DevSecOps/Container Security Engineer in Bathesda, Virginia at Apavo Corporation

About Apavo

Apavo is a woman-owned cybersecurity company supporting Department of Defense and Intelligence Community missions. We're a small, dedicated team where your expertise is valued and your work directly supports national security.

About the Role

Apavo is hiring a DevSecOps Engineer to build and verify hardened software releases for an Intelligence Community AI program. You'll own the secure pipeline that turns code into trusted, deployable containers.

What You'll Do

• Build and maintain secure CI/CD pipelines that produce hardened, digest-pinned container images.
• Generate SBOMs, run vulnerability scans, and produce signed provenance and attestations for each release.
• Review STIG findings and remediate or document each one.
• Produce release evidence that both machines and security reviewers can read.
• Work with the ISSE to feed release evidence into the authorization package.

Required Qualifications

• Active TS/SCI clearance.
• 8+ years in DevSecOps, build and release engineering, or application security.
• Hands-on experience with container builds, SBOMs, and vulnerability scanning tools.
• Experience applying STIGs and remediating findings.

Preferred Qualifications

• Hardened base images, multi-architecture builds, and artifact signing.
• Experience in IL4 or classified environments.
• A DoD 8570/8140 baseline certification.

Benefits

• Medical, dental, and vision insurance starting on your first day, with Apavo covering 90% effective January 1, 2027.
• 401(k) with a 3.5% employer match, starting January 1, 2027.
• 20 days of paid time off plus 11 paid federal holidays.
• Up to $3,000 a year in training and certification reimbursement.
• Parking reimbursement.

Apavo is an Equal Opportunity Employer.