Security Engineer

About This Role: Own security for Avala's platform — from SOC 2 compliance to application security to infrastructure hardening. Our enterprise customers in autonomous vehicles and defense demand the highest security standards, and you'll ensure we exceed them.

What You'll Do: Lead SOC 2 Type II compliance and security audit programs Perform application security reviews and penetration testing Design and implement infrastructure security controls across AWS (ECS, Aurora, S3) Build security monitoring, alerting, and incident response procedures Evaluate and mitigate security risks in customer data handling workflows Work with engineering teams to embed security into the development lifecycle

Requirements: 4+ years in application security, infrastructure security, or security engineering Experience with SOC 2, ISO 27001, or FedRAMP compliance frameworks Strong knowledge of AWS security services and best practices Experience with SAST/DAST tools, vulnerability management, and pen testing Understanding of web application security (OWASP Top 10)

Nice to Have: CISSP, OSCP, or similar security certification Experience with defense/government security requirements (ITAR, CMMC) Background in securing ML or data pipeline infrastructure AWS Infrastructure DevOps

What We Offer: Competitive salary and meaningful equity in the team building Fleet Learning Infrastructure for Physical AI Full health, dental, and vision coverage, plus FSA and unlimited PTO Work on the closed-loop data infrastructure that the next generation of autonomous systems learns from A team that built Tesla Autopilot's data infrastructure, now building something bigger