Staff Engineer, DevOps - DevsecOps

About the role

ABOUT TEKION:

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever. Tekion employs close to 3,000 people across North America, Asia and Europe.

Positively disrupting an industry that has not seen any innovation in over 50 years, Tekion has challenged the paradigm with the first and fastest cloud-native automotive platform that includes the revolutionary Automotive Retail Cloud (ARC) for retailers, Automotive Enterprise Cloud (AEC) for manufacturers and other large automotive enterprises and Automotive Partner Cloud (APC) for technology and industry partners. Tekion connects the entire spectrum of the automotive retail ecosystem through one seamless platform. The transformative platform uses cutting-edge technology, big data, machine learning, and AI to seamlessly bring together OEMs, retailers/dealers and consumers. With its highly configurable integration and greater customer engagement capabilities, Tekion is enabling the best automotive retail experiences ever.

Roles and Responsibilities:

• Security Integration: Embed security best practices across the software development lifecycle (SDLC), from code commit to deployment, ensuring "security by design."

• Collaboration: Work closely with Cloud Security and Product Security teams to develop and enforce security standards, policies, and frameworks.

• Infrastructure Hardening: Implement and automate security controls across AWS/Azure/GCP resources, Kubernetes clusters, containers, and other infrastructure components.

• CI/CD Security: Integrate automated security testing, static and dynamic analysis, and vulnerability scanning into CI/CD pipelines.

• Threat Detection & Incident Response: Develop and maintain monitoring/alerting for security incidents; participate in incident triage, root cause analysis, and response efforts.

• Tooling & Automation: Build and maintain automation for compliance checks, secrets management, access controls, patching, and audit logging.

• Governance: Ensure the team’s infrastructure and deployments are compliant with industry regulations and Tekion’s internal security requirements.

• Continuous Improvement: Stay current with emerging threats, vulnerabilities, and security best practices; propose and implement relevant improvements.