DevSecOps Engineer

(Not Available) - Charlotte, NC

Full-time

Remote - Charlotte, NC

About the position

The DevSecOps Engineer will play a crucial role in enhancing and automating security workflows, managing cloud infrastructure, and conducting security assessments. This position focuses on ensuring compliance with security controls, improving security monitoring capabilities, and collaborating with the product security team to achieve project objectives within a specified timeframe.

Responsibilities

• Manage and secure cloud infrastructure, ensuring compliance with security controls.
• Conduct threat modeling, penetration testing, and security monitoring.
• Remediate audit findings related to any system with access to source code.
• Ensure IP protection and adhere to security guidelines provided by the product security team.
• Perform exploratory investigations and produce detailed security reports.
• Automate security workflows and ensure efficient and reliable operations.

Requirements

• Proficiency in AWS, Python, and Linux.
• Expertise in threat modeling, penetration testing, and security monitoring.
• Strong knowledge of cloud infrastructure management and security practices.
• Investigative skills with the ability to conduct detailed exploratory investigations.
• Awareness of codebase usage on vehicles vs. peripherals.

Nice-to-haves

• Experience with IP protection measures.
• Familiarity with security controls in cloud environments.
• Project management skills with the ability to meet objectives within a 6-month timeframe.
• Strong adaptability and readiness to start immediately under clear guidelines from product security.