Remote Senior Specialist

Summary

Join us at Scout Motors and be part of shaping the future of transportation. As a Security Specialist, you will lead the implementation and integration of security controls in the software development lifecycle, collaborate with system administrators and network engineers to ensure proper configuration and maintenance of security controls, and provide security guidance to Information Technology (IT) Teams.

Requirements

• Bachelor's or Master's degree in Computer Science, Information Security, or a related field
• 8+ years of experience in information security, with a focus on secure development, application security, DevSecOps, and/or cloud security
• In-depth knowledge of information security principles, best practices, and frameworks (e.g., ISO 27001, NIST)
• Relevant security certifications such as K8S: (CKS, KCSA) AWS Certified Security Specialty
• Strong understanding of network and system architecture, including cloud environments
• Deep experience engineering security controls in cloud IaaS environments
• Extension knowledge of Infrastructure as Code (IaC) practices such as Terraform, Pulumi, Ansible, CDK, etc
• Experience with EKS/K8S, Helm, Kustomize and other container orchestration techniques and practices
• Familiarity with could-native security controls and configuration
• Experience in designing and implementing security solutions across multiple platforms and technologies
• Familiarity with regulatory requirements such as GDPR, HIPAA, PCI DSS, etc
• Professional certifications such as CISSP, CISM, or GIAC are highly desirable

Responsibilities

• Be a hands-on security specialist in the Dev-Ops build culture of Scout’s cloud-first Platform Engineering Team
• Lead the implementation and integration of security controls in the software development lifecycle
• Collaborate with system administrators and network engineers to ensure proper configuration and maintenance of security controls
• Help develop and implement an organization-wide information security strategy and roadmap for software and cloud security
• Provide security guidance to Information Technology (IT) Teams to design and develop secure information systems, networks, and applications, ensuring alignment with business goals and regulatory requirements
• Define security requirements and recommend appropriate security technologies and solutions
• Possess a deep understanding cloud-native security concepts and the integration of security controls into IaaS – specifically AWS and Azure
• Implement and configure security controls such as firewalls, intrusion detection systems, encryption mechanisms, access controls, and authentication systems, using Infrastructure as Code, and DevOps practices
• Conduct regression testing to ensure completeness and efficacy of security controls and configurations
• Conduct security assessments to identify potential vulnerabilities and develop mitigation strategies
• Implement, operate, and automate security controls, and procedures
• Aid security awareness programs and training sessions for IT and engineering employees to promote a security-conscious culture
• Participate in incident response efforts during security incidents, support forensic investigations, and implement corrective actions
• Stay up to date with the latest information security trends, threats, and technologies, and provide recommendations for improvement
• Collaborate with internal and external auditors to ensure compliance with relevant regulations and standards
• Participate in audits, assess security controls, and provide necessary documentation and evidence

Benefits

• Competitive insurance including: Medical, dental, vision and income protection plans
• 401(k) program with: An employer match and immediate vesting
• Generous Paid Time Off including: 20 days planned PTO, as accrued; 40 hours of unplanned PTO and 14 company or floating holidays, annually; Up to 16 weeks of paid parental leave for biological and adoptive parents of all genders