Software Engineer, DevSecOps

About the role

Apex manufactures satellite buses at scale using a combination of software, vertical integration, and hardware designed for manufacturing. These buses enable the future of society, including earth observation, communications, and more. This role is crucial for automating and securing the software infrastructure that supports Apex’s mission.

Responsibilities

• Design, develop, and own the software infrastructure that enables Apex teams to move faster, scale, and deliver reliable products.
• Build and maintain CI/CD pipelines across a range of languages and functions, primarily in GitHub Actions.
• Develop and optimize containerized build and test workflows; own base images, build caching, and artifact management (JFrog Artifactory).
• Own the secure container supply chain: harden base images, manage trusted registries, and integrate image scanning into every build.
• Automate SBOM generation and vulnerability/license scanning (e.g., JFrog Xray) across artifacts and container images, delivering results back to software teams in a clear, actionable, automated format.
• Own static analysis tooling (e.g., Black Duck, Klocwork) and surface findings in a digestible, automated way.
• Collaborate with software engineers to identify, triage, and remediate application security vulnerabilities; champion secure coding, threat modeling, and developer security training.
• Work with embedded, ground, and infrastructure teams to embed security principles directly into CI/CD pipelines.

Requirements

• U.S. Person status — this role requires access to export-controlled data.
• 4+ years of hands-on experience in DevOps, platform / DevSecOps, or cloud infrastructure roles.
• Bachelor's degree in Computer Science, Electrical Engineering, or equivalent experience.
• Strong proficiency building and maintaining CI/CD pipelines in GitHub Actions.
• Hands-on experience with Docker and container development — building, hardening, and optimizing images.
• Experience with secure container, SBOM, and scanning tools (e.g., Chainguard, JFrog Xray, Binarly).
• Experience with artifact management (JFrog Artifactory).

Nice to Have

• Experience with container orchestration (Kubernetes).
• Working knowledge of Linux and system administration.
• Experience with cloud infrastructure (AWS preferred), networking, and services.
• Familiarity with static analysis tooling (Black Duck, Klocwork).