MOTER Technologies, Inc. (“MOTER”) is unlocking the world of connected vehicle data to power innovative products and services for the automotive, mobility, and insurance industries. Our edge-computing-based advanced data analytics and software platform transforms vehicle data into actionable insights that drive the next generation of driver scoring, risk analytics, and insurance solutions.

MOTER is modernizing the insurance industry by equipping insurers with real-time vehicle insights to enhance underwriting, streamline claims, and improve risk assessment. To drive this transformation, MOTER is building white-labeled insurance products for some of the most recognized brands in the automotive industry. These offerings leverage the full suite of MOTER’s connected vehicle data solutions—including next-generation telematics and claims visualization tools—bridging the gap between automakers and insurers, accelerating innovation, and delivering measurable value across the mobility ecosystem.

Job Overview

The Senior DevSecOps Engineer builds and operates the platform that powers developer experience and security across our engineering organization. This role will design and run our CI/CD runner fleet (Bitbucket Pipelines and/or GitLab Runners), shape the security guardrails that protect production, and turn high-friction requests — ACL changes, IAM roles, network rules, secrets — into safe, automated, self-service paths.

This role will own our shared Terraform libraries and operate them as internal services with an API-first mindset, so product engineers can request infrastructure — VPC endpoints, IAM roles, S3 buckets, RDS, EKS workloads — in a paved-road, secure-by-default way. This individual will harden our AWS multi-account environment and Amazon EKS footprint, drive vulnerability management and pentest remediation, and partner with engineering teams as a trusted security advisor. This is a hands-on platform-engineer-meets-security role.

This role is AI-first. The Senior DevSecOps Engineer is expected to write and maintain code — Terraform and other IaC, automation scripts, runner configurations, internal tooling, and security policies — using AI-assisted engineering as a core part of your daily workflow. The ideal candidate is comfortable delegating well-scoped tasks to AI coding agents, reviewing and hardening their output, and treating prompt design, evals, and guardrails as part of the engineering craft. This role reports to the Director of Engineering.

• Work AI-first. Use AI-assisted engineering as your default approach to write, refactor, and maintain Terraform and other IaC, pipeline configurations, automation scripts, internal tooling, and security policies — while reviewing AI-generated output critically and owning the final quality, security, and reliability of what ships.
• Help define and evolve MOTER’s standards for AI-assisted engineering: code review, evals, secret hygiene, prompt and context patterns, and guardrails that keep AI-generated infrastructure and security code safe in production.
• Build and operate our CI/CD runner fleet on Bitbucket Pipelines and/or GitLab Runners — ephemeral, autoscaling, OIDC-authenticated to AWS, with strong workload isolation, signed artifacts, and SLSA-aligned supply-chain controls.
• Own MOTER’s shared Terraform libraries and modules; expose them as internal services with an API-first interface so engineering teams can request infrastructure (VPC endpoints, IAM roles, S3 buckets, RDS, EKS workloads) in a paved-road, secure-by-default way.
• Create safe, automated self-service paths for high-toil requests — ACL and security-group changes, IAM permission grants, KMS keys, and secret provisioning — backed by policy-as-code, automated review, and full auditability.
• Define and enforce security policies and guardrails across the SDLC: pre-commit hooks, SAST/DAST/SCA, IaC scanning (Checkov, tfsec, OPA/Conftest), container image scanning, and secret detection — tuned for high signal-to-noise and clear remediation paths.
• Harden MOTER’s AWS multi-account environment using AWS Organizations, SCPs, Control Tower (or equivalent landing zone), IAM Identity Center, GuardDuty, Security Hub, Config, CloudTrail, KMS, and Secrets Manager.
• Operate and secure our Amazon EKS clusters and Amazon ECR supply chain: RBAC, network policies, admission control (OPA Gatekeeper / Kyverno), pod security standards, IAM Roles for Service Accounts (IRSA), image signing (cosign), and runtime protection.
• Run a risk-based vulnerability management program across cloud, code, containers, and dependencies; coordinate internal and external penet