Senior Vehicle Systems and Software Security Engineer

Description

• Provide technical guidance and support to IT and Vehicle Engineering teams regarding security-related issues and initiatives.
• Define security requirements based on industry best practices and regulatory compliance and recommend appropriate security technologies and solutions.
• Establish, automate and enforce security policies, standards, guidelines, and procedures.
• Work with stakeholders, including designers, vehicle and software engineering teams, Information Technology (IT) architects, and business units to understand product requirements and develop security strategies that meet their needs.
• Conduct risk assessments to identify potential security vulnerabilities and develop mitigation strategies.
• Work with vehicle engineers to assess and govern security measures that ensure the safety and availability of connected vehicle systems.
• Provide guidance to enterprise IT teams to design and develop secure information systems, networks, and applications, ensuring alignment and integration with vehicle security and capabilities, and regulatory requirements.
• Conduct regression testing to ensure completeness and efficacy of security controls and configurations.
• Lead security reviews and security assurance program to ensure controls are configured and operating appropriately.
• Lead threat modeling and risk assessments to identify potential security threats and vulnerabilities in vehicle software, systems and architecture.
• Serve as a subject matter expert in cloud-native security to support the integration of security controls into IaaS – specifically AWS and Azure – and other cross-functional capabilities.

Requirements

• Residing in San Francisco: Pursuant to the San Francisco Fair Chance Ordinance, Scout Motors will consider for employment qualified applicants with arrest and conviction records.
• 8+ years of relevant work experience in designing and implementing security solutions in complex enterprises and product environments.
• This role may be based out of a Scout Motors location in Columbia, South Carolina or based out of the Scout Motors corporate headquarters in Charlotte, NC. This role may be remote to start but will transition to an in-office setting at the headquarters within 6 months of start date. This role is not eligible for remote work in New York City.
• Applicants should expect that the role will require the ability to convene with Scout colleagues in person and travel to participate in events on behalf of the company from time to time.
• Strong communication and collaboration skills to work effectively with cross-functional teams.
• Excellent problem-solving skills and the ability to analyze complex security issues and develop effective solutions.
• Residing in New York City: This role is not eligible for remote work in New York City.
• Experience working with product security operations centers is required - vehicle security operations centers is preferred.
• Familiarity with industry standards and regulations, such as ISO 27001, ISO 24134, NIST, TISAX, GDPR, or HIPAA.
• Strong understanding of network and system security, including firewalls, intrusion detection systems, and encryption technologies.
• Residing in Los Angeles: Scout Motors will consider for employment qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chance Initiative for Hiring Ordinance.
• Relevant certifications, such as CISSP and CISM, are highly desirable.
• In-depth knowledge of security principles, best practices, technologies, and frameworks in the domain of DevSecOps, product security, cloud security, and threat modeling.
• Proficiency in security assessment and auditing tools and methodologies.
• 5+ years cloud development and security experience, some experience in connected vehicle software systems is preferred.
• The responsibilities of this role require 4-5 days attendance in office with in-person meetings and events regularly.
• Bachelor's degree in Computer Science, Management Information Systems, Information Security, or a related field (advanced degree preferred).

Benefits

• Generous Paid Time Off including:
• Paid leave for circumstances related to bereavement, jury duty, voting time, or military leave
• Competitive insurance including:
• Up to 16 weeks of paid parental leave for biological and adoptive parents of all genders
• Medical, dental, vision and income protection plans
• 401(k) program with:
• 20 days planned PTO, as accrued
• 40 hours of unplanned PTO and 14 company or floating holidays, annually

Training + Development

Interview process

Visa Sponsorship

Security clearance