DevSecOps Engineer, Coast
$110-130k
+ Bonus + Equity Grant
3-4 days a week in office (SoHo, NY)
Payments platform & fuel card for fleets
Open for applications
Payments platform & fuel card for fleets
21-100 employees
Open for applications
$110-130k
+ Bonus + Equity Grant
3-4 days a week in office (SoHo, NY)
21-100 employees
Company mission
Coast's mission is to make fleet management easy.
Role
Who you are
- Have 3+ years experience working with first-class engineering teams with a proven track record of continually improving their employer’s security posture
- Have experience working directly with product engineers to incrementally improve our practices
- Be proficient at automating tooling, whether it be using the shell or (preferably) a programming language such as Python or Javascript
- Have experience with one of Terraform/CloudFormation/Pulumi/CDK since we treat our infrastructure as code
- Deep hands-on knowledge and experience developing in the cloud (preferably AWS), especially IAM and SIEM, but also AWS networks
- Be able to figure stuff out - the modern security space is deep and complex, and there are many ways of solving the same problem. You need to be able to go off on your own, research and design a solution, implement technical spikes, and then deliver it with the team
- Have an owner mindset and continuously look for, notice, and implement improvements to our posture, because small continuous improvements matter
- Keep a finger on the pulse of the industry - latest risks, trends in CICD, networking, phishing, and vendor landscape
What the job involves
- The DevSecOps Engineer will be our first explicitly security-focused hire
- In this role you will be an early member of the platform engineering team, and help us mature a critical part of our organization
- We value speed and flexibility, but are also aware of the importance of maintaining high standards for compliance, which we consider a key part of our ability to execute
- Working directly with an enthusiastic and invested product team, you will help us stay on top of a wide array of areas, from network security and least-privilege permissions in the cloud, to rationalizing our SIEM and code scanning posture, to partner information requests and SOC2 compliance, to vendor and supply chain security
- At the end of the day, we want to establish “paved paths” that allow us to minimize friction and maximize visibility and viability
- The role will work closely with the Compliance team, our General Counsel, and the CTO; this role reports to the Head of Platform
- Week 1:
- We use OKRs to help us focus, and Kanban to organize day to day work - you will start picking up small improvements off the board and contribute across our IAM, SIEM, and CICD ecosystems
- We treat infrastructure as code, so we expect you to get your first story merged by the end of the week after passing automated checks and peer review
- You will establish the cadence of 1x1s with your manager
- Month 1:
- Collaborate with a product engineer to secure a new feature
- Update our notification system to help us identify potentially dangerous issues sooner
- Inform what our firewall and SIEM strategy for 2025 will look like
- Assist with crafting responses to a questionnaire for a new partnership
- Contribute to planning and retrospectives
- Write your first design document for a major feature
- Month 2:
- All of the above, but also you will get to do your first dev talk
- Establish your development goals with your manager
- Hold a high bar for security standards and help us innovate best practices
- Influence design and implementation of all aspects of our product, by acting as a sounding board and SME for our product managers and engineers
- Work with our compliance team to ensure that we are able to successfully respond to requests from our partners and maintain our SOC2 Certification
- Improve scanning to ensure that risks in our codebase and cloud environment are identified, assessed, and remediated in a timely manner
- Organize our permissioning system to ensure that the right people have appropriate access, and unnecessary people don’t
- Help shape the engineering culture of the company by championing security practices
- Maintain comprehensive documentation of the security infrastructure, policies, and procedures
- Remain relentlessly pragmatic and balance the product velocity demand with the needs of a secure platform
Our take
In recent years, companies like Ramp, Brex, Divvy, and others have emerged to provide easier ways for companies to allow their employees to pay for job-related expenses through corporate cards. However, none of these services really work for businesses operating automobile fleets - approximately 10% of B2B card spend in the US.
That’s where Coast comes in, offering a modern card issuing expense solution specifically built for fleets. The Coast card meets the demands of fleets-specific controls, security, and visibility, contributing to preventing fraud and unauthorized use. Its platform allows fleet managers to visualize spend, block or flag transactions for review, and set their own rules for card holders.
With back-to-back funding rounds awarded in 2024, Coast has been focused on expanding its team and the platform’s capabilities, offering a wider range of financial products - including parking, maintenance, and other on-the-road expenses on top of just fuel. Its Visa Fleet card program, which enables Coast Visa Fleet cardholders to make payments wherever Visa is accepted, makes it an attractive option in the market as fleet management continues to modernize.
Freddie
Company Specialist at Welcome to the Jungle
Company
Funding (last 2 of 4 rounds)
Jul 2024
$40m
SERIES B
Mar 2024
$25m
EARLY VC
Total funding: $98.5m
Company benefits
- Medical, dental, and vision coverage
- Meaningful stock options
- Flexible vacation policy
Company HQ
SoHo, New York, NY
Leadership
Daniel Simon
(CEO)Previously co-founded consumer finance startup Bread, which sold to Alliance Data Systems for over $500 million in 2020.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 8 more jobs at Coast