Specialist, DevSecOps

Scout Motors • Charlotte, NC

5d • $110,000 - $135,000 • Onsite

About The Position

Scout Motors is bringing back an iconic American vehicle, electrifying and digitizing it with American innovation. We are building a company that respects its people, customers, and the balance of work and play. We offer two powertrain options: an all-electric powertrain and the Harvester™ range extender powertrain. We empower our teams to innovate and are looking for individuals who are visionary, collaborative, passionate, and knowledgeable doers. Join us to shape the future of transportation and make history.

Requirements

• Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
• 4+ years of hands-on experience as a DevOps, Cloud, Site Reliability, or Platform Engineer with a strong security focus.
• Proficient in building automation using languages such as Python, Shell, Ruby, or similar scripting languages.
• Strong experience with containerization technologies, including Docker and Kubernetes, with the ability to secure and harden container workloads and cluster configurations.
• Expertise in configuration management tools such as Ansible, Chef, or Puppet.
• Solid understanding of CI/CD concepts and tools, including GitHub Actions, GitLab Pipelines, Harness.io, or ArgoCD, with experience embedding security controls into pipeline workflows.
• Multiple years of experience working with cloud platforms such as AWS, Azure, or Google Cloud, including understanding of cloud-native security services and controls.
• Experience with infrastructure-as-code tools such as Terraform, Pulumi, or CDK, with the ability to write secure, reusable modules and templates.
• Excellent problem-solving and troubleshooting skills. When a problem occurs, you run towards it, not away.
• Effective communication and collaboration skills. You treat colleagues with respect, have a desire for clean implementations, and are humble in discussing alternative solutions and options.
• A teaching and coaching approach to guiding engineers and teams, with patience and clarity when helping others understand security concepts and remediation approaches.

Responsibilities

• Partner directly with Platform Engineering to remediate security vulnerabilities in cloud infrastructure, Kubernetes clusters, container images, and CI/CD pipelines—writing code, submitting pull requests, and validating fixes.
• Triage and prioritize vulnerability findings from security scanning tools (e.g., Wiz, Snyk, GHAS etc), translating security risks into actionable remediation plans that engineering teams can execute.
• Harden container images, Kubernetes configurations, and cloud infrastructure by implementing security best practices, CIS benchmarks, and least-privilege access patterns.
• Embed security controls into CI/CD pipelines, including automated vulnerability scanning, secrets detection, infrastructure-as-code policy checks, and deployment gates that prevent insecure configurations from reaching production.
• Develop and maintain secure infrastructure-as-code templates, Terraform modules, and Kubernetes manifests that support secure deployment practices.
• Provide guidance to engineers on secure development and infrastructure practices and support knowledge-sharing activities.
• Collaborate with Security Operations to investigate and respond to security incidents involving infrastructure, containers, or pipeline compromise, providing hands-on technical support during incident response.
• Build automation that accelerates vulnerability remediation, including scripts, bots, and workflows that auto-fix common misconfigurations or generate remediation pull requests for engineering review.
• Contribute to security documentation, runbooks, and remediation guides that enable engineering teams to self-serve on common security issues and maintain secure configurations over time.

Benefits

• Competitive insurance including: Medical, dental, vision and income protection plans
• 401(k) program with: An employer match and immediate vesting
• Generous Paid Time Off including: 20 days planned PTO, as accrued
• 40 hours of unplanned PTO and 14 company or floating holidays, annually
• Up to 16 weeks of paid parental leave for biological and adoptive parents of all genders
• Paid leave for circumstances related to bereavement, jury duty, voting time, or military leave
• Pay Transparency

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree