Director of DevSecOps

📋 Job Overview

At Slingshot Aerospace, we're on a mission to make space safer and more secure for everyone. Our work directly impacts global security, disaster response, climate monitoring, and the critical infrastructure that connects our world. We're a team of builders, thinkers, and problem-solvers who believe that the next generation of space operations will be powered by better data and smarter software. We move fast, we're not afraid to fail, and we believe the best ideas can come from anywhere—whether you're in engineering, sales, product, or operations. If you want to work on something that truly matters, with people who care deeply about the impact we're making and help shape the future of an industry that's just getting started, you're in the right place.

🏢 About Slingshot

The DevSecOps Director leads Slingshot's cloud platform operations and security engineering across company-owned, partner, and customer environments. Reporting to the CISO, this role is accountable for secure-by-default engineering across AWS, Azure, and classified platforms while ensuring reliable operations and readiness for regulated missions. This leader owns the DevSecOps operating model, including team development, capacity planning, on-call escalation, cloud and pipeline security, operational KPIs, and roadmaps for new environments and security improvements. The role also provides architecture and compliance input for RFIs and RFPs, supports pricing estimates, and communicates plans, staffing needs, risks, and decisions in executive-ready narratives.

🎯 The Role

The DevSecOps Director leads Slingshot's cloud platform operations and security engineering across company-owned, partner, and customer environments. Reporting to the CISO, this role is accountable for secure-by-default engineering across AWS, Azure, and classified platforms while ensuring reliable operations and readiness for regulated missions. This leader owns the DevSecOps operating model, including team development, capacity planning, on-call escalation, cloud and pipeline security, operational KPIs, and roadmaps for new environments and security improvements. The role also provides architecture and compliance input for RFIs and RFPs, supports pricing estimates, and communicates plans, staffing needs, risks, and decisions in executive-ready narratives.

✅ Key Responsibilities

• Own secure and reliable multi-cloud operations, primarily in AWS with Azure as needed, including AWS Organizations, account baselines, guardrails, and coverage across commercial, GovCloud, and classified environments.
• Lead infrastructure-as-code and compliance-as-code using Terraform, Kubernetes, and Helm, and embed security into CI/CD workflows using tools such as GitHub Advanced Security and JFrog.
• Ensure comprehensive scanning, observability, and pre-deployment security gates, including GuardDuty, Inspector, Security Hub, SBOM intake, container and image scanning, and dependency risk triage for Slingshot and partner components.
• Own the on-call program and executive escalation paths for cloud operational and security incidents, while improving availability, response times, pipeline performance, and cloud cost efficiency.
• Lead authorization-to-operate readiness for high-side environments, including SSP and POA&M tracking, evidence collection, ISSO coordination, and accreditation milestones.
• Guide secure enclave designs, including GCC High and Azure Virtual Desktop, with effective identity federation, logging and monitoring, and incident response processes.
• Maintain CMMC Level 2 alignment for internal controls and program delivery, and apply FedRAMP familiarity to preserve a credible future path to authorization.
• Build, mentor, and manage a growing team of employees and contractors, with clear tasking, performance coaching, career development, and accountability aligned to defined job ladders.
• Plan capacity, hiring, vendor and contractor utilization, and onboarding so team members become productive quickly and consistently meet Slingshot security standards.
• Establish operating rhythms, roadmaps, and priorities for security mitigation and the deployment of new environments in support of company initiatives and customer programs.
• Provide architecture options, systems diagrams, and security control mappings for RFIs, RFPs, and customer program planning.
• Own technical proposal sections addressing security and compliance requirements, and contribute level-of-effort estimates and bills of materials that support accurate pricing.
• Establish and publish operational KPIs, including mean time to resolution, urgent incidents, and availability, and provide regular reporting on performance, delivery progress, and roadmap risk.
• Brief executives on plans, staffing needs, risks, and mitigation strategies, translating technical tradeoffs into clear business and m