Specialist, DevSecOps
Scout Motors3 months ago
Charlotte, NC, USAMid Level
H1B sponsor
Base Salary
$110k - $135k/yr
Responsibilities
- Partner with Platform Engineering to remediate vulnerabilities in cloud infrastructure, Kubernetes clusters, container images, and CI/CD pipelines by writing code, submitting pull requests, and validating fixes.
- Triage and prioritize findings from Wiz, Snyk, GHAS, and other security scanning tools and translate risks into actionable remediation plans.
- Harden container images, Kubernetes configurations, and cloud infrastructure using security best practices, CIS benchmarks, and least-privilege access patterns.
- Embed vulnerability scanning, secrets detection, infrastructure-as-code policy checks, and deployment gates into CI/CD pipelines.
- Develop and maintain secure Terraform modules, infrastructure-as-code templates, and Kubernetes manifests.
- Guide engineers on secure infrastructure and development practices and support knowledge-sharing activities.
- Collaborate with Security Operations on infrastructure, container, and pipeline security incidents, providing hands-on incident-response support.
- Build scripts, bots, and workflows that automate vulnerability remediation and generate remediation pull requests.
- Create security documentation, runbooks, and remediation guides for engineering teams.
Requirements
- Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.
- At least 4 years of hands-on experience as a DevOps, Cloud, Site Reliability, or Platform Engineer with a strong security focus.
- Proficiency building automation with Python, Shell, Ruby, or similar scripting languages.
- Strong Docker and Kubernetes experience, including securing and hardening container workloads and cluster configurations.
- Expertise with configuration management tools such as Ansible, Chef, or Puppet.
- Experience with GitHub Actions, GitLab Pipelines, Harness.io, or ArgoCD and embedding security controls into pipeline workflows.
- Multiple years of experience with AWS, Azure, or Google Cloud and cloud-native security services and controls.
- Experience with Terraform, Pulumi, or CDK and the ability to write secure, reusable infrastructure-as-code modules and templates.
- Strong problem-solving, troubleshooting, communication, collaboration, teaching, and coaching skills.
Benefits
- Medical, dental, vision, and income protection insurance plans.
- 401(k) program with employer match and immediate vesting.
- 20 days of planned PTO as accrued, 40 hours of unplanned PTO, and 14 company or floating holidays annually.
- Up to 16 weeks of paid parental leave and paid leave for bereavement, jury duty, voting time, or military leave.
- Full-time, exempt position based primarily at the Charlotte, NC headquarters, requiring 4-5 days per week in the office and occasional travel.
- Annual performance bonus eligibility is provided, with compensation details determined by company policy.
About Scout Motors
Scout Motors designs and manufactures electric trucks and rugged SUVs for consumer drivers, reviving the historic Scout off‑road brand. Founded in 2022 and headquartered in Charlotte, North Carolina, the company is building a manufacturing plant in Blythewood, South Carolina. Its lineup targets work and outdoor use, with both an all‑electric powertrain and a Harvester range‑extender option that integrates a gas generator for extended range.