Jobs

Overview:

VTG is seeking a DevSecOps (DSO) Engineer to join our team at a pivotal moment as we modernize and advance a multimillion‑dollar government data cloud platform. As a DSO Engineer, you will play a central role in designing and implementing the secure, automated cloud foundation that enables this transformation. This is a high‑visibility, high‑impact role for an engineer passionate about cloud architecture, security, and automation. You will enable and enhance modern DevSecOps pipelines, implement comprehensive tagging strategies, support FinOps practices, and develop tenant level architectures and security attributes across a complex cloud ecosystem.

Responsibilities:

Must be able to work on-site at least 3 days per week
Align AWS, Azure, and Oracle infrastructure to support a multi‑tenant, cost‑sharing architecture
Design and implement cloud tagging, TBM, and FinOps frameworks for tenant‑level cost visibility
Build and maintain secure GitLab CI/CD pipelines for microservices in a Linux/Kubernetes environment
Containerize and harden services using Docker, Kubernetes, Helm, and IaC
Establish cloud‑native reference architectures for HA, DR, monitoring, and security
Ensure compliance with NIST 800‑53, FedRAMP, RMF, STIGs, SCAP, and ATO processes
Document systems, pipelines, and processes; mentor teams on DevSecOps best practices
Qualifications:
Required Knowledge, Skills, and Abilities
Proven experience designing and implementing DevSecOps pipelines using GitLab CI/CD (or equivalent)
Strong experience with Linux, Kubernetes, Docker, and Helm
Familiarity with federal security / compliance frameworks: NIST 800‑53, FedRAMP, RMF, STIGs, and ATO
Working knowledge of at least one major cloud provider (AWS/Azure) with the ability to apply concepts
Scripting or programming proficiency in Python, Bash, PowerShell, or Go
CompTIA Security+ certification (or higher), or ability to obtain within 90 days of hire
Excellent written and verbal communication skills, with th

About the Company

CertiK is the largest blockchain security auditor and provides a comprehensive suite of tools to secure the industry at scale. To date, CertiK has worked with over 4,900 Enterprise clients, secured over $557 billion worth of digital assets, and has detected over 18,000 vulnerabilities in blockchain code. Our clients include leading projects such as OKX, Tether, Ripple, and Pancakeswap. Our investors include top VCs like Tiger Global, Coatue Management, Shunwei Capital and Hillhouse Capital as well as industry leaders like Coinbase Ventures and Binance.

About the Role

We are seeking a Junior Blockchain Security Engineer with a strong security mindset and foundational technical expertise across smart contracts, blockchain nodes, and decentralized infrastructure. In this role, you will support Web3 projects by assisting in code audits, contributing to security tools, and conducting research under guidance. If you are eager to grow your career in blockchain security and passionate about securing decentralized technologies, we’d love to hear from you.

Responsibilities
• Audit and review codebases for smart contracts, blockchain protocols, and decentralized applications (dApps) to identify and remediate vulnerabilities.
• Conduct guided security research, explore new attack vectors, and deliver actionable insights.
• Contribute to the design, development, and maintenance of internal security tools and frameworks.
• Support improvements to internal processes, methodologies, and service offerings, ensuring high-quality delivery for clients.

Requirements
• Bachelor’s, Master’s, or PhD in Mathematics, Computer Science, or Information Security.
• At least 1 years of hands-on experience with blockchain technologies, including: Smart contracts (EVM chains, Solana, Move, etc.), Blockchain protocols (nodes, SDKs, Cosmos, etc.)
• Experience in threat modeling, risk assessment, and security analysis.
• Proficiency in one or more programming languages: Rust, Go