5 months ago
Responsibilities
- Lead the design and implementation of secure-by-default platform capabilities, including authentication, secrets management, encryption, identity controls, and security automation services.
- Drive adoption of zero-trust architecture, least-privilege access, and platform security standards across infrastructure and engineering environments.
- Provide technical leadership and prioritization for Platform Security initiatives spanning multiple teams and stakeholders.
- Apply expertise in threat modeling, software supply chain security, cloud security, infrastructure security, and secure software development practices.
- Lead cross-functional security programs and strategic remediation initiatives with measurable risk-reduction outcomes.
- Integrate security capabilities into development platforms, CI/CD systems, software delivery workflows, and cloud-native architectures.
- Evaluate and implement AI-enabled approaches for vulnerability discovery, prioritization, triage, detection, analysis, and remediation.
- Mentor engineers and raise platform security standards across the engineering organization.
Requirements
- Bachelor’s degree in Computer Science, Computer Engineering, Electrical Engineering, Mathematics, or a related technical discipline.
- 12+ years of relevant professional experience, including at least 5 years focused on cloud, infrastructure, or platform security.
- Strong programming experience in Java, Go, Python, or similar languages used for security automation and platform engineering.
- Deep cloud platform security expertise across AWS, Azure, Google Cloud, or OCI environments.
- Expertise in container security, Kubernetes security, service mesh technologies, Infrastructure as Code, and cloud security posture management.
- Strong understanding of identity and access management, network security, vulnerability management, runtime security, and software supply chain security.
- Experience designing and integrating security tooling into CI/CD pipelines, software delivery workflows, and cloud-native platforms.
- Experience leading large-scale security initiatives involving multiple engineering teams and stakeholder groups.
- Strong communication and technical leadership skills with the ability to influence engineering organizations.
- Preferred qualifications include experience securing large-scale SaaS or cloud-native platforms and leading platform security or security engineering programs.
- Preferred qualifications include experience with AI-enabled security tooling, security standards, architecture patterns, engineering governance, and certifications such as CISSP, CCSP, or GCSA.
Benefits
- Compensation package, paid time off, paid parental leave, and potential eligibility for bonuses.
- Private medical, life, and disability insurance may be available depending on location.
- Inclusive culture with employee-run resource groups and senior leadership and executive sponsorship.
About Avalara
Avalara builds cloud software that automates tax calculation, returns filing, exemption certificate management, and cross-border compliance for businesses, with deep integrations into e-commerce and ERP platforms. Founded in 2004 and headquartered in Durham, North Carolina, it is privately held and owned by Vista Equity Partners. The company sells SaaS subscriptions and managed filing services to help organizations comply with U.S. sales tax and international VAT/GST requirements.