Specialist, DevSecOps

Description

• Design and implement CI/CD security pipelines embedding automated checks throughout the SDLC.
• Partner with developers, infrastructure engineers, and analysts to embed security into workflows without impacting productivity.
• Continuously evaluate tool coverage, emerging threats, and industry best practices to evolve the organization’s security tooling landscape.
• Build developer-friendly guardrails and paved roads that enable secure, high-velocity development.
• Automate provisioning, configuration, and lifecycle management of security tools using Python, Bash, and other scripting languages.
• Establish security-as-code and compliance-as-code frameworks to standardize governance and enforcement.
• Develop custom integrations between platforms for unified security operations and data correlation.
• Maintain comprehensive documentation, runbooks, diagrams, and training materials for security tools and automation processes.
• Collaborate with specialized security architects (e.g., Connected Vehicle, Connected Factory) to apply enterprise security patterns.

Requirements

• 3+ years of hands-on experience with security tool administration and automation
• Residing in San Francisco: Pursuant to the San Francisco Fair Chance Ordinance, Scout Motors will consider for employment qualified applicants with arrest and conviction records.
• Curiosity-driven mindset with a passion for continual learning and knowledge sharing
• Knowledge of API security, authentication protocols (OAuth, SAML, OIDC), and zero-trust principles
• Applicants should expect that the role will require the ability to convene with Scout colleagues in person and travel to participate in events on behalf of the company from time to time.
• Demonstrated expertise in both traditional security tooling and modern DevSecOps practices
• Residing in New York City: This role is not eligible for remote work in New York City.
• This role may be based out of the Scout Motors corporate headquarters in Charlotte, NC. This role may be remote to start but will transition to an in-office setting at the headquarters within 6 months of start date. This role is not eligible for remote work in New York City.
• 5+ years of proven experience working as a Security Engineer, DevSecOps Engineer, or in a similar role
• Experience driving security culture change and developer security adoption
• Minimum of High School Diploma, GED or equivalent required for all roles at Scout Motors, Inc.
• Excellent analytical and problem-solving skills with the ability to work effectively under pressure
• Proficiency in scripting languages including Python, Bash, PowerShell, and JavaScript
• Residing in Los Angeles: Scout Motors will consider for employment qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chance Initiative for Hiring Ordinance.
• Ability to translate complex security concepts to both technical and non-technical audiences
• Experience with Infrastructure-as-Code tools (Terraform, Ansible, CloudFormation)
• Strong communication and teamwork skills to collaborate with cross-functional teams
• Bachelor’s degree in computer science, Information Security, or a related field. Equivalent experience may be considered.
• The responsibilities of this role require 4-5 days attendance in office with in-person meetings and events regularly.
• Strong understanding of cloud platforms (AWS, Azure, GCP) and cloud-native security services

Benefits

• Generous Paid Time Off including:
• Paid leave for circumstances related to bereavement, jury duty, voting time, or military leave
• Competitive insurance including:
• Up to 16 weeks of paid parental leave for biological and adoptive parents of all genders
• Medical, dental, vision and income protection plans
• 401(k) program with:
• 20 days planned PTO, as accrued
• 40 hours of unplanned PTO and 14 company or floating holidays, annually

Training + Development

Interview process

Visa Sponsorship

Security clearance