Security Engineer

Own security for Avala's platform — from SOC 2 compliance to application security to infrastructure hardening. Our enterprise customers in autonomous vehicles and defense demand the highest security standards, and you'll ensure we exceed them.What You'll Do:• Lead SOC 2 Type II compliance and security audit programs• Perform application security reviews and penetration testing• Design and implement infrastructure security controls across AWS (ECS, Aurora, S3)• Build security monitoring, alerting, and incident response procedures• Evaluate and mitigate security risks in customer data handling workflows• Work with engineering teams to embed security into the development lifecycleRequirements:• 4+ years in application security, infrastructure security, or security engineering• Experience with SOC 2, ISO 27001, or FedRAMP compliance frameworks• Strong knowledge of AWS security services and best practices• Experience with SAST/DAST tools, vulnerability management, and pen testing• Understanding of web application security (OWASP Top 10)Nice to Have:• CISSP, OSCP, or similar security certification• Experience with defense/government security requirements (ITAR, CMMC)• Background in securing ML or data pipeline infrastructure