Security Engineer

Own security for Avala's platform — from SOC 2 compliance to application security to infrastructure hardening. Our enterprise customers in autonomous vehicles and defense demand the highest security standards, and you'll ensure we exceed them.

What You'll Do: • Lead SOC 2 Type II compliance and security audit programs • Perform application security reviews and penetration testing • Design and implement infrastructure security controls across AWS (ECS, Aurora, S3) • Build security monitoring, alerting, and incident response procedures • Evaluate and mitigate security risks in customer data handling workflows • Work with engineering teams to embed security into the development lifecycle

Requirements: • 4+ years in application security, infrastructure security, or security engineering • Experience with SOC 2, ISO 27001, or FedRAMP compliance frameworks • Strong knowledge of AWS security services and best practices • Experience with SAST/DAST tools, vulnerability management, and pen testing • Understanding of web application security (OWASP Top 10)

Nice to Have: • CISSP, OSCP, or similar security certification • Experience with defense/government security requirements (ITAR, CMMC) • Background in securing ML or data pipeline infrastructure