Specialist, DevSecOps

What you’ll do

Become part of an iconic brand that is set to revolutionize the electric pick-up truck & rugged SUV marketplace by achieving the following:

• Partner directly with Platform Engineering to remediate security vulnerabilities in cloud infrastructure, Kubernetes clusters, container images, and CI/CD pipelines—writing code, submitting pull requests, and validating fixes. 
• Triage and prioritize vulnerability findings from security scanning tools (e.g., Wiz, Snyk, GHAS etc), translating security risks into actionable remediation plans that engineering teams can execute. 
• Harden container images, Kubernetes configurations, and cloud infrastructure by implementing security best practices, CIS benchmarks, and least-privilege access patterns. 
• Embed security controls into CI/CD pipelines, including automated vulnerability scanning, secrets detection, infrastructure-as-code policy checks, and deployment gates that prevent insecure configurations from reaching production. 
• Develop and maintain secure infrastructure-as-code templates, Terraform modules, and Kubernetes manifests that support secure deployment practices. 
• Provide guidance to engineers on secure development and infrastructure practices and support knowledge-sharing activities. 
• Collaborate with Security Operations to investigate and respond to security incidents involving infrastructure, containers, or pipeline compromise, providing hands-on technical support during incident response. 
• Build automation that accelerates vulnerability remediation, including scripts, bots, and workflows that auto-fix common misconfigurations or generate remediation pull requests for engineering review. 
• Contribute to security documentation, runbooks, and remediation guides that enable engineering teams to self-serve on common security issues and maintain secure configurations over time. 

Location & Travel Expectations

• This role may be based out of the Scout Motors corporate headquarters in Charlotte, NC. 
• This role requires 4-5 days per week in the office, with regular in-person meetings and events. 
• Applicants should expect that the role will require the ability to convene with Scout colleagues in person and travel to participate in events on behalf of the company from time to time.

What you’ll bring 

We expect all Scout employees to have integrity, curiosity, resourcefulness, and strive to exhibit a positive attitude, as well as a growth mindset. You’ll be comfortable with change and flexible in a fast-paced, high-growth environment. You’ll take a collaborative approach to achieve ambitious goals. Here's what else you'll bring: 

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience. 
• 4+ years of hands-on experience as a DevOps, Cloud, Site Reliability, or Platform Engineer with a strong security focus. 
• Proficient in building automation using languages such as Python, Shell, Ruby, or similar scripting languages. 
• Strong experience with containerization technologies, including Docker and Kubernetes, with the ability to secure and harden container workloads and cluster configurations. 
• Expertise in configuration management tools such as Ansible, Chef, or Puppet. 
• Solid understanding of CI/CD concepts and tools, including GitHub Actions, GitLab Pipelines, Harness.io, or ArgoCD, with experience embedding security controls into pipeline workflows. 
• Multiple years of experience working with cloud platforms such as AWS, Azure, or Google Cloud, including understanding of cloud-native security services and controls. 
• Experience with infrastructure-as-code tools such as Terraform, Pulumi, or CDK, with the ability to write secure, reusable modules and templates. 
• Excellent problem-solving and troubleshooting skills. When a problem occurs, you run towards it, not away. 
• Effective communication and collaboration skills. You treat colleagues with respect, have a desire for clean implementations, and are humble in discussing alternative solutions and options. 
• A teaching and coaching approach to guiding engineers and teams, with patience and clarity when helping others understand security concepts and remediation approaches. 

What you'll gain

The benefits of joining Scout include the chance to build products and a company from the ground up.  This is a chance to create something new and lasting – with an iconic brand at its foundation.  In addition, Scout provides competitive compensation and benefits to support your physical, mental, and financial wellbeing. Program specifics are detailed in company policies and employee benefit guides, select highlights:

• Competitive insurance including:
  • Medical, dental, vision and income protection plans
• 401(k) program with:
  • An employer match and immediate vesting
• Generous Paid Time Off including:
  • 20 days planned PTO, as accrued
  • 40 hours of unplanned PTO and 14 company or floating holidays, annually
  • Up to 16 weeks of paid parental leave for biological and adoptive parents of all genders
  • Paid leave for circumstances related to bereavement, jury duty, voting time, or military leave

Pay Transparency

This is a full-time, exempt position eligible to receive a base salary and to participate in an annual performance bonus program. Final salary offered will be determined based on factors including but not limited to the candidate's skills and experience. The annual performance bonus program is preset and not candidate dependent.

Initial base salary range = $110,000.00 - $135,000.00

Internal leveling code: IC9