SSE DevSecOps

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises, and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers, and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia, and Europe.

Responsibilities:

• Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design. "
• Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks.
• Infrastructure Hardening: Implement and automate security controls across AWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components.
• CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines.
• Threat Detection and Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts.
• Tooling and Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging.
• Governance: Ensure the team's infrastructure and deployments are compliant with industry regulations and Tekion's internal security requirements.
• Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements.
• Evangelism: Foster a security-first mindset within DevOps and engineering teams through knowledge sharing, documentation, and training.

Requirements:

• Bachelor's degree in computer science, Engineering, or a related technical field, or equivalent practical experience.
• 5 to 8 years of experience in DevOps, Site Reliability Engineering, or Security Engineering roles.
• Solid hands-on experience with cloud infrastructure (AWS/GCP/Azure).
• Deep understanding of secure infrastructure design, identity and access management, network security, and related best practices.
• Experience securing container platforms (Docker, Kubernetes) and modern CI/CD toolchains (e. g., Jenkins, Tekton, GitHub Actions, ArgoCD).
• Proficiency in at least one scripting/programming language (Python, Go, etc. ) and strong automation skills.
• Practical familiarity with vulnerability management, scanning, threat modeling, and remediation workflows.
• Strong collaboration, communication, and documentation abilities.