Security Operations Manager

What you’ll do

This role will report to the VP of Information and Data Security, driving continuous improvement of incident response capabilities and collaborating across departments to ensure a robust security posture. This is a hands-on role, building and operating the Application Security function for Scout Motors.  It is expected that this role will initially have 90% hands-on responsibility requiring direct involvement in technical tasks, so familiarity with common vulnerability management and App Sec tools is a must.  As the program grows, this role will also take-on people management responsibilities, so experience managing people and guiding a team are a plus.

Become part of an iconic brand that is set to revolutionize the electric pick-up truck & rugged SUV marketplace by achieving the following:

• Manage and mentor a team of security engineers and analysts to monitor and maintain security operations, ensuring effective and timely detection and response to security incidents and vulnerabilities.
• Supervise the monitoring of security alerts generated by various systems, including SIEM, IDS/IPS, and antivirus. Prioritize and escalate incidents as appropriate, ensuring effective triage.
• Lead the vulnerability management program by overseeing regular vulnerability scans, coordinating patch management efforts, and ensuring timely remediation of identified weaknesses. Collaborate with IT and development teams to close security gaps and reduce overall risk.
• Oversee incident response activities, including investigation, containment, mitigation, remediation, and documentation. Coordinate across teams to ensure the rapid resolution of security incidents and minimize business impact.
• Oversee identify and access management processes, ensuring proper implementation and maintenance of user access controls, role-based access, and least-privilege principles. Work with relevant teams to secure authentication mechanisms and manage access reviews to ensure compliance with security policies.
• Develop and maintain incident response plans, playbooks, and standard operating procedures to ensure consistent and effective incident handling.
• Drive post-incident analysis to identify the root causes, vulnerabilities, and patterns behind incidents. Implement lessons learned to prevent similar future occurrences.
• Collaborate with cross-functional teams to identify and implement proactive measures to enhance the organization's security posture and prevent future incidents.
• Conduct post-incident analysis to identify underlying root causes and recommend improvements to prevent similar incidents in the future.
• Stay up to date with the latest security threats, attack vectors, and industry best practices to continuously improve incident detection and response capabilities.
• Participate in regular security assessments, vulnerability scanning, and penetration testing to identify and address potential weaknesses in the security infrastructure.
• Provide leadership, guidance, and career development opportunities to team members, promoting a culture of continuous improvement and professional growth.
• Contribute to the development and enforcement of security policies, procedures, and standards to ensure compliance with regulatory requirements and industry best practices.
• Stay up to date with the latest security threats, technologies, and trends. Leverage this knowledge to continuously enhance Scout Motors’ security operations, vulnerability management, IAM, and incident response capabilities.

Location & Travel Expectations: Applicants should expect that the role may require the ability to convene with Scout colleagues in person and be able to travel to participate in events on behalf of the company from time to time. This role can be based out of a Scout Motors location in Columbia, SC or Novi, MI. This role is not eligible for remote work in New York City.

What you’ll bring 

We expect all Scout employees to have integrity, curiosity, resourcefulness, and strive to exhibit a positive attitude, as well as a growth mindset. You’ll be comfortable with change and flexible in a fast-paced, high-growth environment. You’ll take a collaborative approach to achieve ambitious goals. Here's what else you'll bring: 

• Bachelor's degree in computer science, information security, or a related field.
• 8+ years of experience as a hands-on leader in Security Operations and Vulnerability Management, with strong expertise in Application Security.
• Demonstrated ability to manage and lead a technical team in a fast-paced, evolving environment.
• Command of security risk treatment and mitigation effort, including remediation of vulnerabilities and containment and recovery of security incidents.
• Experience working in cross-functional teams to achieve timely results and address critical security needs.
• Experience in handling and triaging security alerts, conducting incident investigations, and coordinating response efforts.
• Knowledge of common security vulnerabilities, threat vectors, attacker techniques and tactics.
• Experience managing managed service providers in the areas of vulnerability management, identity management.
• Understanding of security incident lifecycle, including incident classification, escalation, containment, eradication, and recovery.
• Familiarity with security frameworks and best practices for the automotive industry, such as ISO/SAE 21434, and TISAX, to ensure that Scout Motors’ security operations practices align with these standards, enhancing security measures specific to the automotive industry.
• Professional certifications such as CISSP, GCIH, GCIA, or other relevant certifications are preferred.
• Excellent analytical and problem-solving skills with the ability to work effectively under pressure.
• Strong communication and teamwork skills to collaborate with cross-functional teams and effectively communicate incident details and recommendations.

What you'll gain

The benefits of joining Scout include the chance to build products and a company from the ground up.  This is a chance to create something new and lasting – with an iconic brand at its foundation.  In addition, Scout provides competitive compensation and benefits to support your physical, mental, and financial wellbeing. Program specifics are detailed in company policies and employee benefit guides, select highlights:

• Competitive insurance including:
  • Medical, dental, vision and income protection plans
• 401(k) program with:
  • An employer match and immediate vesting
• Generous Paid Time Off including:
  • 20 days planned PTO, as accrued
  • 40 hours of unplanned PTO and 14 company or floating holidays, annually
  • Up to 16 weeks of paid parental leave for biological and adoptive parents of all genders
  • Paid leave for circumstances related to bereavement, jury duty, voting time, or military leave
• Corporate Vehicle Program with:
  • Eligibility for 1 assigned vehicle
  • A mobility stipend

Pay Transparency

This is a full-time, exempt position eligible to receive a base salary and to participate in an annual performance bonus program. Final salary offered will be determined based on factors including but not limited to the candidate's skills and experience. The annual performance bonus program is preset and not candidate dependent.

Initial base salary range = $145,000-$170,000

Internal leveling code: M8

Notice to applicants:

• Residing in San Francisco: Pursuant to the San Francisco Fair Chance Ordinance, Scout Motors will consider for employment qualified applicants with arrest and conviction records. 
• Residing in Los Angeles: Scout Motors will consider for employment qualified applicants with criminal histories in a manner consistent with the Los Angeles Fair Chance Initiative for Hiring Ordinance. 
• Residing in New York City: This role is not eligible for remote work in New York City.