DevSecOps Engineer

Your Qualifications

• 4+ years of experience in DevSecOps, Security Engineering, or a related role focused on CI/CD pipeline security.
• Bachelor’s degree in any engineering discipline; Computer Science is preferred but not mandatory.
• Proven experience securing cloud environments, preferably Google Cloud Platform (GCP), with familiarity in IAM, Secret Manager, VPC controls, and Cloud KMS.
• Strong practical experience with hardening continuous integration/continuous deployment (CI/CD) systems (e.g., GitHub Actions, Blacksmith, or similar).
• Proficiency in security practices for application development (SAST, DAST, secret scanning) and a deep understanding of common security anti-patterns (e.g., hard-coded secrets, insufficient input validation).
• Proficient in languages like Golang, Typescripts, Python, or similar programming languages used for automation and development.
• Familiarity with compliance standards like SOC 2, PCI DSS, or ISO 42001 and experience generating evidence for auditors.
• Can handle the high intensity and fast pace of a startup environment.
• Strong verbal and written communication skills.
• Maxima is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.