Information Security Engineer

What You'll Do

Avalara Security is looking for a professional who is passionate about information security and cloud to join our Cloud Security team. The Cloud Security Engineer works across the organization to deploy automated solutions aimed at addressing Avalara's information assets. You are well-versed in at least one programing or scripting language and will have a history of using automation to manage risk in one or more hyper scale cloud providers. You will also have extensive knowledge of cloud security architectures, cloud security services, and experience engineering complex enterprise cloud solutions. You will report to a Manager of Cloud Security. You will work hybrid out of the Durham, NC area. #LI-Hybrid

What You'll Need to be Successful

• Degree in Information Systems or Information Security related studies and 4+ years experience in security (or relevant years of experience in another related field)
• Experience designing secure cloud architectures in a hyper-scale cloud service provider (AWS, GCP, Azure, OCI)
• 4+ years experience using common cloud security services and solutions such as Identity and Access Management (IAM), Cloud Security Posture Management (CSPM), and cloud security logging
• Experience and advanced technical knowledge with Infrastructure as Code (IaC), Git, Continuous Integration and Continuous Deployment (CI/CD) pipelines
• Experience using programming or scripting languages for automation
• You enjoy working across a diverse set of teams to design and implement security solutions
• Understanding of common container and orchestration technologies such as Docker, Containerd, and Kubernetes

You May Also Have:

• CISSP, CISA, or CISM certifications
• Relevant Azure, OCI, AWS, or OCI certifications
• Understanding of SSAE18 SOC2, PCI-DSS, NIST, and ISO 27000 standards
• Experience deploying multi-cloud security services
• Experience improving cloud Identity and Access Management (IAM) services and processes
• Experience using a programming language to integrate with APIs
• You will guide program growth by using modern secure architectures and services

About the Team

Cloud Security's primary mission is to support Avalara's primary business by ensuring our users securely use cloud services and implementing protections against threats to our cloud assets and data. We are responsible for planning, building, and deploying security solutions in multi-cloud environments. We partner with other security teams, developers, and leadership to identify risks, design solutions, and lead risk mitigation across the organization.