Specialist, DevSecOps

Here at Scout Motors, we're carrying forward the heritage of one of the most iconic American vehicles in history. A vehicle dating back to 1960. One that forged the path for future generations of rugged SUVs and trucks and will do so once again. But Scout is more than just a brand, it’s a legacy steeped in a culture of exploration, caretaking, and hard work. The Scout brand is all about respect. Respect for the past and the future by taking an iconic American brand that hasn’t been around for a while, electrifying it, digitizing it, and loading it with American innovation. Respect for communities by creating a company that stands for its people and its customers. Respect for both work and play, with vehicles that are equally at home at a camp site, a job site, or on a Tuesday commute. And respect for our customers by developing two powertrains that meet their requirements — an all-electric powertrain as well as the Harvester™ range extender powertrain which includes a built-in gas-powered generator with an estimated 500 miles of combined range. At Scout Motors, we empower our talented, inclusive, and entrepreneurial teams to innovate. What makes a Scout employee? Someone who is a visionary and a leader, who seeks new paths and shares lessons learned. A knowledgeable doer who collaborates across the company to build better. A go-getter with unrivaled passion. Join us at Scout Motors and be part of shaping the future of transportation. If you're ready to drive change and make history, apply now! What you’ll do Become part of an iconic brand that is set to revolutionize the electric pick-up truck & rugged SUV marketplace by achieving the following: Partner directly with Platform Engineering to remediate security vulnerabilities in cloud infrastructure, Kubernetes clusters, container images, and CI/CD pipelines—writing code, submitting pull requests, and validating fixes.   Triage and prioritize vulnerability findings from security scanning tools (e.g., Wiz, Snyk, GHAS etc), translating security risks into actionable remediation plans that engineering teams can execute.   Harden container images, Kubernetes configurations, and cloud infrastructure by implementing security best practices, CIS benchmarks, and least-privilege access patterns.   Embed security controls into CI/CD pipelines, including automated vulnerability scanning, secrets detection, infrastructure-as-code policy checks, and deployment gates that prevent insecure configurations from reaching production.   Develop and maintain secure infrastructure-as-code templates, Terraform modules, and Kubernetes manifests that support secure deployment practices.   Provide guidance to engineers on secure development and infrastructure practices and support knowledge-sharing activities.   Collaborate with Security Operations to investigate and respond to security incidents involving infrastructure, containers, or pipeline compromise, providing hands-on technical support during incident response.   Build automation that accelerates vulnerability remediation, including scripts, bots, and workflows that auto-fix common misconfigurations or generate remediation pull requests for engineering review.   Contribute to security documentation, runbooks, and remediation guides that enable engineering teams to self-serve on common security issues and maintain secure configurations over time.   Location & Travel Expectations This role may be based out of the  Scout Motors corporate headquarters in Charlotte, NC .  This role requires 4-5 days per week in the office, with regular in-person meetings and events.  Applicants should expect that the role will require the ability to convene with Scout colleagues in person and travel to participate in events on behalf of the company from time to time. What you’ll bring  We expect all Scout employees to have integrity, curiosity, resourcefulness, and strive to exhibit a positive attitude, as well as a growth mindset. You’ll be comfortable with change and flexible in a fast-paced, high-growth environment. You’ll take a collaborative approach to achieve ambitious goals. Here's what else you'll bring:  Bachelor's degree in Computer Science, Information Technology, or a related field, or equivalent work experience.   4+ years of hands-on experience as a DevOps, Cloud, Site Reliability, or Platform Engineer with a strong security focus.   Proficient in building automation using languages such as Python, Shell, Ruby, or similar scripting languages.   Strong experience with containerization technologies, including Docker and Kubernetes, with the ability to secure and harden container workloads and cluster configurations.   Expertise in configuration management tools such as Ansible, Chef, or Puppet.   Solid understanding of CI/CD concepts and tools, including GitHub Actions, GitLab Pipelines, Harness.io, or ArgoCD, with experience embedding security controls into pipeline workflows.   Multiple years of experience working with cloud platforms such as AWS, Azure, or Google Cloud, including understanding of cloud-native security services and controls.   Experience with infrastructure-as-code tools such as Terraform, Pulumi, or CDK, with the ability to write secure, reusable modules and templates.   Excellent problem-solving and troubleshooting skills. When a problem occurs, you run towards it, not away.   Effective communication and collaboration skills. You treat colleagues with respect, have a desire for clean implementations, and are humble in discussing alternative solutions and options.   A teaching and coaching approach to guiding engineers and teams, with patience and clarity when helping others understand security concepts and remediation approaches.   What you'll gain The benefits of joining Scout include the chance to build products and a company from the ground up .  This is a chance to create something new and lasting – wit