Security Engineer
Own security for Avala's platform — from SOC 2 compliance to application security to infrastructure hardening. Our enterprise customers in autonomous vehicles and defense demand the highest security standards, and you'll ensure we exceed them.
What You’ll Do:
Lead SOC 2 Type II compliance and security audit programs
Perform application security reviews and penetration testing
Design and implement infrastructure security controls across AWS (ECS, Aurora, S3)
Build security monitoring, alerting, and incident response procedures
Evaluate and mitigate security risks in customer data handling workflows
Work with engineering teams to embed security into the development lifecycle
Requirements:
4+ years in application security, infrastructure security, or security engineering
Experience with SOC 2, ISO 27001, or FedRAMP compliance frameworks
Strong knowledge of AWS security services and best practices
Experience with SAST/DAST tools, vulnerability management, and pen testing
Understanding of web application security (OWASP Top 10)
Nice to Have:
CISSP, OSCP, or similar security certification
Experience with defense/government security requirements (ITAR, CMMC)
Background in securing ML or data pipeline infrastructure