DevSecOps Engineer

Slingshot Aerospace

13d•$100,000 - $135,000

About The Position

At Slingshot Aerospace, we're on a mission to make space safer and more secure for everyone. Our work directly impacts global security, disaster response, climate monitoring, and the critical infrastructure that connects our world. We're a team of builders, thinkers, and problem-solvers who believe that the next generation of space operations will be powered by better data and smarter software. We move fast, we're not afraid to fail, and we believe the best ideas can come from anywhere—whether you're in engineering, sales, product, or operations. If you want to work on something that truly matters, with people who care deeply about the impact we're making and help shape the future of an industry that's just getting started, you're in the right place. As a DevSecOps Engineer, you will manage the cloud security implementation for multiple cloud environments to include AWS, Azure, and classified platforms. You will also be responsible for designing, implementing, and maintaining secure software development practices and tools for Slingshot’s software development lifecycle. Slingshot Aerospace cares deeply about our commitment to company values, mission, and purpose. The core competencies we will be looking to identify include: intellectual agility, ability to develop innovative solutions, leadership, performance orientation, and industry expertise.

Requirements

Must have an active TS/SCI clearance or be eligible and willing to obtain one
3+ years of professional experience in a DevSecOps or similar role
Experience with container security practices within Kubernetes and Helm
Experience with security configuration of AWS Cloud Native Technologies
Deep working knowledge of version control (Git) and CI/CD tools (GitHub Actions)
Experience with infrastructure as code frameworks including Terraform
Good understanding of networking, routing, firewalls, VPN, SSL
Knowledge of programming/scripting languages (Python, Bash, JavaScript) used in DevSecOps life cycles
Keen attention to detail and industry best practices pertaining to privacy, security, and compliance
Skill and comfort working in a rapidly moving startup environment with dynamic objectives and iteration with users

Nice To Haves

Degree in computer science or related field
Active TS/SCI clearance
Experience with asynchronous processing and/or data streaming technologies, such as AWS Kinesis, Kafka, or ZeroMQ, KNative
Experience with securing data platforms, microservices, distributed systems and deploying into classified cloud environments
Experience with security audits/certifications such as SOC 2 Type 2, FedRAMP, CMMC 2.0, ISO 27001
Early-stage data-centric startup experience

Responsibilities

Executes all position responsibilities in alignment with Slingshot’s core values, mission, and purpose
Work within Engineering teams to interweave security with the scalability, performance, reliability, and functional requirements to virtualized/cloud computing solutions
Leverage industry best practices and experience to ensure that security is baked into deliverables from the start and that each product and program fully embrace a DevSecOps and “shift-left on security” mentality
Develop automated build and test pipeline strategies including aspects of security and compliance to ensure viability of cloud deployment solutions
Secure and manage cloud-native resource on providers like AWS and Azure through infrastructure-as-code and compliance-as-code
Administer and support developer and user access to cloud resources
Leverage observability tools to monitor security metrics for applications virtualized resources
Participate in Agile software develop and deployment processes
Provide ongoing support for the services and applications that are critical to our business needs
Communicate methods, findings, and hypotheses with stakeholders
Perform other duties as assigned (to be less than 10% of the responsibilities listed above)