DevSecOpsEngineer

Rockstar is recruiting for a modern enterprise accounting platform that eliminates the pain of financial operations through powerful integrations, intuitive design, and AI-driven automation. By consolidating processes into a single, easy-to-use platform and automating repetitive tasks, the client frees accounting teams to focus on strategic, high-impact work—achieving more with fewer resources. The client's team is led by top engineers and finance professionals from companies like Robinhood, Bolt, EY, Facebook, Twitter, Netflix, Amazon, Google, Airbnb, Rubrik, and more. Together, they are using their extensive industry experience to transform the way businesses manage their finances. The client is backed by leading Silicon Valley investors. They raised the largest seed round in their category, with support from top-tier VCs such as Kleiner Perkins and Audacious Ventures. This funding has allowed them to launch a fully operational product and onboard several major customers. ### Your Role * **Implement and manage DevSecOps practices** across the entire Software Development Lifecycle (SDLC), ensuring a "shift-left" approach to security. * Comfortable with **Kubernetes** and other container orchestration platforms. * **Design and harden CI/CD pipelines** (e.g., GitHub Actions) by implementing minimal permissions and leveraging OIDC with Workload Identity Federation for cloud deployments. * **Integrate and enforce security checks** , including SAST, dependency scanning, and secret scanning (e.g., using tools like Trufflehog or GitGuardian), to fail builds on high-severity issues. * **Secure cloud infrastructure (GCP)** by implementing the principle of least privilege for IAM, configuring VPC firewalls to restrict traffic, and using Google Secret Manager. * **Manage encryption and key rotation** using Cloud KMS, ensuring all secrets are handled securely and not stored in code or plaintext. * **Oversee container and artifact hardening** , including using multi-stage build