Max Maass
Senior Security Specialist at iteratec nurdemteam eG
Hamburg, Germany
Summary
🤩
Rockstar🎓
Top SchoolMax Maass is a Senior Security Specialist based in Hamburg with 12 years of experience blending applied research and hands-on engineering in IT security. He moved from a research role at TU Darmstadt—where he worked on privacy, user-facing security notifications and public measurement platforms during his PhD—to production security and DevOps at iteratec. Max contributes to notable open-source projects like secureCodeBox (enhancing continuous secure delivery and semgrep integration) and the NFC research toolkit nfcgate, focusing on backend, init-container orchestration and NFC session tooling. He combines interdisciplinary academic rigor with practical tooling and automation expertise, often tackling the glue work between scanners, orchestration and incident workflows. His background uniquely positions him to translate research insights about user-facing security into reliable, deployable systems.
12 years of coding experience
Technischen Universität DarmstadtBachelor of Science - BS, Informatik, Bachelor of Science - BS, Informatik at Universität Hamburg
German, English
Github Skills (15)
javas10
kubernetes10
devops10
android10
protobuffer10
protobuf10
java10
kubernetes-pods10
cicd9
security-automation9
security-testing9
sqlite8
go8
docker8
dockers8
Programming languages (19)
Github contributions (5)
nfcgate/nfcgate
Oct 2014 - Apr 2021
An NFC research toolkit application for Android
Role in this project:
Back-end Developer
Back-end DeveloperContributions:6 releases, 344 commits, 4 PRs in 6 years 6 months
Contributions summary:Max primarily worked on enhancing the NFC research toolkit for Android. They focused on developing the back-end infrastructure for the system, adding the necessary base interfaces and foundational classes for both NFC tag reading and emulation. Their contributions include implementing methods to send commands to NFC chips and receive responses, and they also integrated functionality for session logging.
security-auditrelayreplaysecurityandroid
secureCodeBox/secureCodeBox
Oct 2021 - Nov 2022
secureCodeBox (SCB) - continuous secure delivery out of the box
Role in this project:Back-end & DevOps Engineer
Back-end & DevOps EngineerContributions:126 reviews, 266 commits, 106 PRs in 1 year 1 month
Contributions summary:Max Maass's contributions focused on enhancing the continuous secure delivery capabilities of the secureCodeBox project. The commits demonstrate the implementation of init container support for scans, which involved modifying scan definitions and reconciler logic. They also added features such as the inheritInitContainer property to cascading scans. Furthermore, significant work was done to support the new semgrep scanner and integrate it with the DefectDojo hook.
secureowasp-zapsecurity-automationsecurity-toolsbox
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.