5 months ago
Toronto, CanadaMid Level
Responsibilities
- Implement and manage DevSecOps practices across the software development lifecycle using a shift-left security approach.
- Design and harden CI/CD pipelines with minimal permissions and OIDC-based workload identity for cloud deployments.
- Integrate SAST, dependency scanning, and secret scanning and fail builds on high-severity findings.
- Secure GCP infrastructure through least-privilege IAM, VPC firewall controls, Google Secret Manager, and Cloud KMS key rotation.
- Harden containers and artifacts through multi-stage builds, vulnerability scanning, and artifact signing with Cosign.
- Ensure application code uses secure coding, input validation, output encoding, and secure authentication and session management through Descope.
- Monitor CI/CD pipelines and production environments for anomalies, security events, and audit logs using GCP and Datadog.
- Maintain documentation and controls supporting SOC 2, SOC 1, and ISO 42001 compliance.
- Assist with deployment automation and internal developer tooling in a full-stack environment.
Requirements
- 4+ years of experience in DevSecOps, Security Engineering, or a related role focused on CI/CD pipeline security.
- Bachelor’s degree in an engineering discipline; Computer Science is preferred but not required.
- Experience securing cloud environments, preferably Google Cloud Platform, including IAM, Secret Manager, VPC controls, and Cloud KMS.
- Strong practical experience hardening CI/CD systems such as GitHub Actions, Blacksmith, or similar tools.
- Proficiency with SAST, DAST, secret scanning, and secure application development practices.
- Proficiency in Golang, TypeScript, Python, or similar programming languages used for automation and development.
- Familiarity with compliance standards such as SOC 2, PCI DSS, or ISO 42001 and experience generating auditor evidence.
- Ability to work in a high-intensity, fast-paced startup environment.
- Strong verbal and written communication skills.
Tech Stack
About Maxima
Maxima AI is the most advanced AI platform for enterprise accounting. Trusted by companies like Rippling, Scale AI, Zip, Glean, Zendesk and Bilt Rewards, Maxima's AI agents do more than just coordinate the work. They pull data from your finance stack, transform transactions to accounting entries, post journal entries with source data, reconcile to the general ledger, detect anomalies, and generate variance explanations to deliver SOX compliant, real-time close Our team brings together top fintech engineers from Google, Apple, Robinhood, Bolt, and Meta with former accountants and auditors from EY, PwC to solve a decades-old problem with agent prepared, human reviewed accounting.