Security Engineer - Platform Security
Generate a McCoy IQ challenge in 30 seconds.
See how candidates think and approach the work this role demands, before the phone screen. We'll build a video challenge from this posting, and you can edit or share it before it goes live.
Key details
Job Description
What You'll Do</h3>Role Summary</span> </span></p></div>Avalara is seeking a Senior Security Engineer to join our Platform Security team. As Avalara continues to expand its global SaaS platform, cloud footprint, and engineering velocity, we require scalable security capabilities that are embedded directly into how software and infrastructure are built and operated.</span> </span></p></div>This role exists to design, implement, and deploy platform-wide security tooling and controls that deliver secure-by-design principles across CI/CD workflows, cloud infrastructure, and runtime compute environments. The successful candidate will collaborate with Product Engineering, Core Services, and Security teams to automate security controls, reduce risk, and improve the security posture of Avalara’s SaaS platform at scale.</span> </span></p></div>This role is ideal for an engineer who combines deep technical expertise in cloud and infrastructure security with a strong track record of technical execution, automation, and cross-functional influence. This position reports to the Senior Manager of Platform Security.</span> </span></p></div>How This Role Elevates Avalara</span> </span></p></div>This role will:</span> </span></p></div>Improve the security posture of Avalara’s cloud platforms through scalable security controls and automation.</span> </span></p></li></ul></div>Reduce infrastructure, CI/CD, and runtime risk by implementing secure-by-default guardrails and engineering best practices.</span> </span></p></li></ul></div>Increase engineering velocity by embedding security into development workflows and enabling teams to build securely at scale.</span> </span></p></li></ul></div>Strengthen platform observability, threat detection, and response capabilities across cloud environments.</span> </span></p></li></ul></div>Advance Avalara’s AI-first strategy by identifying opportunities to responsibly leverage AI within platform security operations.</span> </span></p></li></ul></div>Raise security awareness and capability across engineering teams through technical leadership, collaboration, and mentorship.</span> </span></p></li></ul></div>What Your Responsibilities Will Be</h3>The successful candidate will:</span> </span></p></div>Engineer and deliver secure-by-default platform components and shared security services, including authentication, secrets management, encryption, and access control capabilities.</span> </span></p></li></ul></div>Drive adoption of zero-trust principles, least-privilege access models, and scalable security guardrails across infrastructure, CI/CD pipelines, and runtime environments.</span> </span></p></li></ul></div>Improve platform-wide security posture through enhanced observability, threat detection, security automation, and engineering enablement.</span> </span></p></li></ul></div>Provide technical guidance to engineering teams on threat modeling, secure design practices, and software development lifecycle security controls.</span> </span></p></li></ul></div></div>Lead complex, cross-functional security initiatives with clear milestones, measurable outcomes, and risk reduction objectives.</span> </span></p></li></ul></div>Develop and execute remediation strategies that address security findings and improve organizational security maturity.</span> </span></p></li></ul></div>Collaborate with engineering teams to embed security into cloud-native architectures, deployment pipelines, and operational processes.</span> </span></p></li></ul></div>Identify opportunities to leverage AI and automation to strengthen platform security capabilities and operational effectiveness.</span> </span></p></li></ul></div>12-Month Success Signals</span> </span></p></div>Within the first 12 months, this engineer will:</span> </span></p></div>Deliver platform-wide security capabilities that measurably reduce cloud, infrastructure, and CI/CD risk.</span> </span></p></li></ul></div>Improve adoption of secure-by-default engineering practices across multiple development teams.</span> </span></p></li></ul></div>Increase visibility into security posture through enhanced monitoring, detection, and reporting capabilities.</span> </span></p></li></ul></div>Successfully lead complex remediation and security improvement initiatives involving multiple stakeholder groups.</span> </span></p></li></ul></div>Establish scalable security controls that improve developer experience while maintaining strong security standards.</span> </span></p></li></ul></div>Demonstrate measurable improvements in platform security effectiveness through automation, risk reduction, and operational efficiency.</span> </span></p></li></ul></div>Contribute to the adoption of AI-enabled security capabilities that improve detection, analysis, or response effectiveness.</span> </span></p></li></ul></div>AI Bar Raiser Expectations</span> </span></p></div>At Avalara, all engineers are expected to apply AI in ways that improve business outcomes. As an AI Bar Raiser, this role will help advance how security teams leverage AI and automation to improve risk reduction, operational scale, engineering effectiveness, and platform protection.</span> </span></p></div>The successful candidate will:</span> </span></p></div>Identify and implement AI-enabled approaches that improve security operations, detection, analysis, remediation, and engineering productivity.</span> </span></p></li></ul></div>Evaluate emerging AI security risks and opportunities and provide guidance on responsible adoption.</span> </span></p></li></ul></div>Use AI to improve the efficiency, accuracy, and scalability of platform security processes.</span> </span></p></li></ul></div>Demonstrate measurable improvements in security outcomes through AI-enabled capabilities and automation.</span> </span></p></li></ul></div></div>Promote responsible, secure, and governance-aware use of AI technologies.</span> </span></p></li></ul></div>Share AI best practices and help elevate security and engineering teams’ understanding of AI-enabled security solutions.</span> </span></p></li></ul></div>Bar Raiser Expectations</span> </span></p></div>At Avalara, we hire Bar Raisers - individuals who strengthen teams through technical excellence, sound judgment, and measurable business impact. As a Senior Security Engineer, you will elevate security standards, improve engineering practices, and help create a culture of ownership, accountability, and continuous improvement.</span> </span></p></div>The successful candidate will:</span> </span></p></div>Demonstrate strong ownership and accountability for security outcomes across the platform.</span> </span></p></li></ul></div>Raise engineering and security standards through technical leadership, mentorship, and collaboration.</span> </span></p></li></ul></div>Use sound judgment when balancing security, operational efficiency, developer experience, and business priorities.</span> </span></p></li></ul></div>
Role Summary</span> </span></p></div> Avalara is seeking a Senior Security Engineer to join our Platform Security team. As Avalara continues to expand its global SaaS platform, cloud footprint, and engineering velocity, we require scalable security capabilities that are embedded directly into how software and infrastructure are built and operated.</span> </span></p></div> This role exists to design, implement, and deploy platform-wide security tooling and controls that deliver secure-by-design principles across CI/CD workflows, cloud infrastructure, and runtime compute environments. The successful candidate will collaborate with Product Engineering, Core Services, and Security teams to automate security controls, reduce risk, and improve the security posture of Avalara’s SaaS platform at scale.</span> </span></p></div> This role is ideal for an engineer who combines deep technical expertise in cloud and infrastructure security with a strong track record of technical execution, automation, and cross-functional influence. This position reports to the Senior Manager of Platform Security.</span> </span></p></div> How This Role Elevates Avalara</span> </span></p></div> This role will:</span> </span></p></div> Improve the security posture of Avalara’s cloud platforms through scalable security controls and automation.</span> </span></p></li></ul></div> Reduce infrastructure, CI/CD, and runtime risk by implementing secure-by-default guardrails and engineering best practices.</span> </span></p></li></ul></div> Increase engineering velocity by embedding security into development workflows and enabling teams to build securely at scale.</span> </span></p></li></ul></div> Strengthen platform observability, threat detection, and response capabilities across cloud environments.</span> </span></p></li></ul></div> Advance Avalara’s AI-first strategy by identifying opportunities to responsibly leverage AI within platform security operations.</span> </span></p></li></ul></div> Raise security awareness and capability across engineering teams through technical leadership, collaboration, and mentorship.</span> </span></p></li></ul></div> The successful candidate will:</span> </span></p></div> Engineer and deliver secure-by-default platform components and shared security services, including authentication, secrets management, encryption, and access control capabilities.</span> </span></p></li></ul></div> Drive adoption of zero-trust principles, least-privilege access models, and scalable security guardrails across infrastructure, CI/CD pipelines, and runtime environments.</span> </span></p></li></ul></div> Improve platform-wide security posture through enhanced observability, threat detection, security automation, and engineering enablement.</span> </span></p></li></ul></div> Provide technical guidance to engineering teams on threat modeling, secure design practices, and software development lifecycle security controls.</span> </span></p></li></ul></div></div> Lead complex, cross-functional security initiatives with clear milestones, measurable outcomes, and risk reduction objectives.</span> </span></p></li></ul></div> Develop and execute remediation strategies that address security findings and improve organizational security maturity.</span> </span></p></li></ul></div> Collaborate with engineering teams to embed security into cloud-native architectures, deployment pipelines, and operational processes.</span> </span></p></li></ul></div> Identify opportunities to leverage AI and automation to strengthen platform security capabilities and operational effectiveness.</span> </span></p></li></ul></div> 12-Month Success Signals</span> </span></p></div> Within the first 12 months, this engineer will:</span> </span></p></div> Deliver platform-wide security capabilities that measurably reduce cloud, infrastructure, and CI/CD risk.</span> </span></p></li></ul></div> Improve adoption of secure-by-default engineering practices across multiple development teams.</span> </span></p></li></ul></div> Increase visibility into security posture through enhanced monitoring, detection, and reporting capabilities.</span> </span></p></li></ul></div> Successfully lead complex remediation and security improvement initiatives involving multiple stakeholder groups.</span> </span></p></li></ul></div> Establish scalable security controls that improve developer experience while maintaining strong security standards.</span> </span></p></li></ul></div> Demonstrate measurable improvements in platform security effectiveness through automation, risk reduction, and operational efficiency.</span> </span></p></li></ul></div> Contribute to the adoption of AI-enabled security capabilities that improve detection, analysis, or response effectiveness.</span> </span></p></li></ul></div> AI Bar Raiser Expectations</span> </span></p></div> At Avalara, all engineers are expected to apply AI in ways that improve business outcomes. As an AI Bar Raiser, this role will help advance how security teams leverage AI and automation to improve risk reduction, operational scale, engineering effectiveness, and platform protection.</span> </span></p></div> The successful candidate will:</span> </span></p></div> Identify and implement AI-enabled approaches that improve security operations, detection, analysis, remediation, and engineering productivity.</span> </span></p></li></ul></div> Evaluate emerging AI security risks and opportunities and provide guidance on responsible adoption.</span> </span></p></li></ul></div> Use AI to improve the efficiency, accuracy, and scalability of platform security processes.</span> </span></p></li></ul></div> Demonstrate measurable improvements in security outcomes through AI-enabled capabilities and automation.</span> </span></p></li></ul></div></div> Promote responsible, secure, and governance-aware use of AI technologies.</span> </span></p></li></ul></div> Share AI best practices and help elevate security and engineering teams’ understanding of AI-enabled security solutions.</span> </span></p></li></ul></div> Bar Raiser Expectations</span> </span></p></div> At Avalara, we hire Bar Raisers - individuals who strengthen teams through technical excellence, sound judgment, and measurable business impact. As a Senior Security Engineer, you will elevate security standards, improve engineering practices, and help create a culture of ownership, accountability, and continuous improvement.</span> </span></p></div> The successful candidate will:</span> </span></p></div> Demonstrate strong ownership and accountability for security outcomes across the platform.</span> </span></p></li></ul></div> Raise engineering and security standards through technical leadership, mentorship, and collaboration.</span> </span></p></li></ul></div> Use sound judgment when balancing security, operational efficiency, developer experience, and business priorities.</span> </span></p></li></ul></div>What Your Responsibilities Will Be</h3>