Software Engineer, DevSecOps
Apex Technology, Inc.2 months ago
Los Angeles, CA, USAMid Level
Base Salary
$150k - $187k/yr
Responsibilities
- Build and maintain CI/CD pipelines across languages and functions, primarily using GitHub Actions.
- Develop and optimize containerized build and test workflows, including base images, build caching, and artifact management with JFrog Artifactory.
- Secure the container supply chain by hardening base images, managing trusted registries, and integrating image scanning into builds.
- Automate SBOM generation and vulnerability and license scanning across artifacts and container images, including through JFrog Xray.
- Own static analysis tooling such as Black Duck and Klocwork and present findings in an actionable automated format.
- Own code-signing infrastructure and software verification workflows.
- Develop policy-as-code, custom scanners, and CI/CD integrations to automate security and compliance.
- Partner with software engineers to triage and remediate application security vulnerabilities and promote secure coding, threat modeling, and developer security training.
- Work with embedded, ground, and infrastructure teams to integrate security principles into CI/CD pipelines.
Requirements
- U.S. Person status is required for access to export-controlled data.
- At least four years of hands-on experience in DevOps, platform or DevSecOps, or cloud infrastructure roles.
- Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience.
- Strong proficiency building and maintaining CI/CD pipelines in GitHub Actions.
- Hands-on experience building, hardening, and optimizing Docker container images.
- Experience with secure container, SBOM, and scanning tools such as Chainguard, JFrog Xray, or Binarly.
- Experience with artifact management using JFrog Artifactory.
- Experience with Kubernetes is preferred.
- Working knowledge of Linux and system administration is preferred.
- Experience with cloud infrastructure, networking, and services, preferably AWS, is preferred.
- Familiarity with Black Duck or Klocwork is preferred.
Benefits
- Equity in Apex through shared upside.
- Company-paid medical, dental, and vision insurance for employees and dependents, plus life insurance.
- Paid vacation, paid holidays, and parental leave with childcare reimbursement for work-related travel.
- 401(k) plan with employer matching.
- Daily catered lunch and unlimited snacks.
- Office socials, pickleball tournaments, run club, and family gatherings.
- Dream desk setup and productivity tools.
- Primarily in-person work at the Playa Vista office with flexibility to integrate work and life.