Specialist, DevSecOps

A hands-on DevSecOps engineer in Scout Motors' Information Technology group in Charlotte who pairs with Platform Engineering to fix security weaknesses across the company's cloud estate, container images, Kubernetes and build pipelines, writing the code and pull requests to do it rather than only reporting findings.

The specialist triages output from scanners such as Wiz, Snyk and GitHub Advanced Security, hardens images and cluster settings against CIS benchmarks, adds scanning, secrets detection and policy gates to pipelines, keeps Terraform modules and manifests secure, automates remediation pull requests, and helps Security Operations during infrastructure incidents. Scout wants four or more years as a DevOps, cloud, SRE or platform engineer with a strong security bent, plus scripting, Docker and Kubernetes, configuration management and infrastructure as code.