Software Engineer, DevSecOps

Responsibilities

DevOps & CI/CD

• Build and maintain CI/CD pipelines across a range of languages and functions, primarily in GitHub Actions.
• Develop and optimize containerized build and test workflows; own base images, build caching, and artifact management (JFrog Artifactory).

Secure Containers, SBOM & Scanning

• Own the secure container supply chain: harden base images, manage trusted registries, and integrate image scanning into every build.
• Automate SBOM generation and vulnerability/license scanning (e.g., JFrog Xray) across artifacts and container images, delivering results back to software teams in a clear, actionable, automated format.
• Own static analysis tooling (e.g., Black Duck, Klocwork) and surface findings in a digestible, automated way.
• Software Supply-Chain Security

Code Signing

• Own code-signing infrastructure and verification workflows that guarantee the authenticity and integrity of Apex software
• Build lightweight internal solutions — policy-as-code, custom scanners, CI/CD integrations — that make security and compliance automatic and auditable.
• Partner with software engineers to identify, triage, and remediate application security vulnerabilities; champion secure coding, threat modeling, and developer security training.
• Work with embedded, ground, and infrastructure teams to embed security principles directly into CI/CD pipelines.

Requirements

• Applicants must hold U.S. Person status and must be able to obtain and maintain a U.S. Department of Defense (DoD) security clearance. This requirement is mandated by federal law and the demands of the work performed.
• 4+ years of hands-on experience in DevOps, platform / DevSecOps, or cloud infrastructure roles.
• Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience.
• Strong proficiency building and
• maintaining CI/CD pipelines
• in GitHub Actions.
• Hands-on experience with
• Docker and container development

Preferred

• (e.g., Chainguard, JFrog Xray, Binarly).
• Experience with artifact management (JFrog Artifactory).
• Experience with container orchestration (Kubernetes).
• Working knowledge of Linux and system administration.
• Experience with cloud infrastructure (AWS preferred), networking, and services.
• Familiarity with static analysis tooling (Black Duck, Klocwork)

About the Role

As a key member of the integrated solutions software team, you will design, develop, and own the software infrastructure that lets Apex teams move faster, scale, and keep delivering reliable products. You will build the critical systems that automate software builds, container image creation, security scanning, and SBOM generation across embedded software, flight software, and internal tooling — making security and compliance automatic, auditable, and invisible.

Requirements

— building, hardening, and optimizing images.

Experience with

secure container, SBOM, and scanning tools

Nice to Have

Why Join Apex?

Apex believes in creating a work environment that you look forward to embracing every day. Our employees love working at Apex, and we want you to love it too. We're a fast-growing startup that has raised more than $500M in funding, and we invest heavily in our people from day one.

Shared upside

Receive equity in Apex, letting you benefit from the work you create

Best-in-class healthcare

100% company-paid medical, dental, and vision for you and your dependents, plus $100k life insurance at no cost

Comprehensive PTO package

Starting at 15 days vacation, growing to 20+ days annually, plus 10 paid holidays

Competitive 401(k) plan

Generous matching - 100% match on first 3%, 50% on next 2%

8 weeks paid parental leave

Plus childcare reimbursement up to $350/day for work-related travel

Daily catered lunch and unlimited snacks

To keep you fueled throughout the day

Vibrant community

Monthly office socials, pickleball tournaments, run club, and gatherings for you and your family

Your dream desk setup

All the tools you need to be your most productive self

World-class Playa Vista office

With the benefit of in-person collaboration with amazing coworkers and flexibility to integrate work and life

Real impact opportunity

Work alongside experts from aerospace, new space, and other cutting-edge industries to make a lasting difference

Additional Information

Compensation ranges are set by role, level, location, and alignment with market data. A candidate's specific level and base pay are determined case by case and may vary with job-related skills, education, experience, technical capabilities, and internal equity. Beyond base salary, full-time hires are also eligible for long-term incentives in the form of stock options, along with medical, dental, and vision coverage and a 401(k) retirement plan.

ITAR Requirements

Apex's work is governed by U.S. export control laws, including the International Traffic in Arms Regulations (ITAR) and the Export Administration Regulations (EAR). To be eligible for this role, applicants must either (1) qualify as a U.S. Person, meaning a U.S. citizen or national, a lawful permanent resident (green card holder), a refugee admitted under 8 U.S.C. § 1157, or an individual granted asylum under 8 U.S.C. § 1158, or (2) be able to obtain the required export authorizations from the U.S. Department of State, the U.S. Department of Commerce, or another applicable U.S. government agency. You can learn more about ITAR here

Equal Opportunity Employer

Apex Technology, Inc. is an Equal Opportunity Employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. Candidates and employees are always evaluated based on merit, qualifications, and performance. We will never discriminate on the basis of race, color, gender, national origin, ethnicity, veteran status, disability status, age, sexual orientation, gender identity, marital status, mental or physical disability, or any other legally protected status.