Software Engineer, DevSecOps

About the role

Join the integrated solutions software team to build and maintain the infrastructure that enables rapid, secure, and scalable software delivery. This role focuses on automating critical systems for software builds, container image creation, security scanning, and SBOM generation across various software types. You will ensure security and compliance are inherent and auditable within our development processes.

Key facts

What you'll do

• Develop and maintain continuous integration and deployment pipelines, primarily using GitHub Actions.
• Create and optimize containerized build and testing workflows, managing base images, build caching, and artifact storage.
• Secure the container supply chain by hardening base images, managing trusted registries, and integrating image scanning into every build.
• Automate the generation of Software Bill of Materials (SBOMs) and perform vulnerability and license scanning, providing clear results to software teams.
• Manage static analysis tools and deliver findings in an automated, understandable format.
• Oversee code-signing infrastructure and verification processes to ensure software authenticity and integrity.
• Develop internal solutions for policy-as-code, custom scanners, and CI/CD integrations to enhance security and compliance.
• Collaborate with software engineers to identify and resolve application security vulnerabilities, promoting secure coding practices and threat modeling.
• Integrate security principles into CI/CD pipelines alongside embedded, ground, and infrastructure teams.

Requirements

• Must be a U.S. Person due to access to export-controlled data.
• 4+ years of experience in DevOps, platform/DevSecOps, or cloud infrastructure.
• Bachelor's degree in Computer Science, Electrical Engineering, or equivalent practical experience.
• Strong ability to build and maintain CI/CD pipelines with GitHub Actions.
• Practical experience with Docker and container development, including image building, hardening, and optimization.
• Experience with secure container, SBOM, and scanning tools.
• Experience with artifact management.

Nice to have

• Experience with container orchestration (Kubernetes).
• Familiarity with Linux and system administration.
• Experience with cloud infrastructure (AWS preferred), networking, and services.
• Knowledge of static analysis tooling.

Skills & tools

• GitHub Actions
• Docker
• JFrog Artifactory
• JFrog Xray
• Black Duck
• Klocwork
• Chainguard
• Binarly
• Kubernetes
• AWS

Practical notes

This role offers equity in Apex, 100% company-paid medical, dental, and vision for employees and dependents, $100k life insurance, 15+ days PTO, 10 paid holidays, a 401(k) with a generous company match, 8 weeks paid parental leave, childcare reimbursement for work travel, daily catered lunch, unlimited snacks, and a world-class Playa Vista office.