What You'll Do:

You will engage with the engineers and architects as they build our future application and service capabilities, while ensuring our current generation solutions continue to deliver the trust and reliability our customers expect. If you want to make a big difference in a without endless meetings, if you want to set your direction instead of having it set for you, if you want to have all the benefits of startup and an established company, we want to talk to you.

Our ideal Senior Application Security Engineer has experience working on a variety of platforms and is passionate about managing risks. Security can be complex, so you will make it simple, but make its impact in our engineering organizations. You will provide guidance, training, and support. You will talk tech and business. You will find the right solution, not the first solution. You value challenge and you dig in, all while having fun and not getting too serious. You will report into Senior Manager, Product Security.

Remote opportunity. #LI-Remote

This role is not eligible for visa sponsorship.

What Your Responsibilities Will Be:

Setting strategic direction for application security within Avalara, including processes and reporting
Perform code and design reviews of internal and customer-facing software products and solutions
Provide training, education, awareness, and communication to development and engineering groups
Guide the Product teams to improve the vulnerabilities
Develop software development policies, standards, procedures, and technical controls
Manage security tooling infrastructure and configuration
Mentor, the junior Application Security Engineers

What You'll Need to be Successful:

Bachelor's degree in computer science, Engineering, or related field
Minimum of 8 years work experience performing manual code review and threat modeling
Minimum of 8 years work experience with SCA, SAST, DAST application security tools
Deep experience identifying, evaluation, and remediating application vulnerabilities including the OWASP Top 10
Experience working with a variety of development tools, languages, and environments, including Python, Go Lang, Terraform, .NET, Java, PHP, and Node.js
Experience working with cloud orchestration technologies like Docker, Kubernetes & IAC
Experience working with a variety of cloud providers including AWS & GCP
Experience developing and securing applications in AWS
Good to have security certifications including CISSP, CSSLP, GIAC & AWS
Knowledge of regulatory and compliance standards including SOC 2, ISO 27001 and GDPR
Hands-on experience in a continuous integration deployment (CI/CD) environment

Pay Range Details

The base pay range(s) below are provided in compliance with state specific laws. Pay ranges may be different in other locations.

Colorado $148,800-$245,600 (annually)

Washington $148,800-$271,500 (annually)

California $148,800-$297,300(annually)

NYC $164,500-297,300 (annually)

The pay range above is the general base pay range for you in the state listed. Your actual salary/wage may be based on several factors, such as geographic location, candidate experience and qualifications, market and business considerations. This role is eligible for an annual bonus based on company performance, depending on the terms of the applicable plan and your role.

How We'll Take Care of You:

Total Rewards

In addition to a great compensation package, paid time off, and paid parental leave, many Avalara employees are eligible for bonuses.

Health & Wellness
Benefits vary by location but generally include private medical, life, and disability insurance.

Inclusive culture and diversity
Avalara strongly supports diversity, equity, and inclusion, and is committed to integrating them into our business practices and our organizational culture. We also have a total of 8 employee-run resource groups, each with senior leadership and exec sponsorship.

Learn more about our benefits by region here: Avalara North America

What You Need To Know About Avalara:

We’re Avalara. We’re defining the relationship between tax and tech.

We’ve already built an industry-leading cloud compliance platform, processing nearly 40 billion customer API calls and over 5 million tax returns a year, and this year we became a billion-dollar business. Our growth is real, and we’re not slowing down until we’ve achieved our mission - to be part of every transaction in the world.

We’re bright, innovative, and disruptive, like the orange we love to wear. It captures our quirky spirit and optimistic mindset. It shows off the culture we’ve designed, that empowers our people to win. Ownership and achievement go hand in hand here. We instill passion in our people through the trust we place in them.

We’ve been different from day one. Join us, and your career will be too.

We’re An Equal Opportunity Employer

Supporting diversity and inclusion is a cornerstone of our company — we don’t want people to fit into our culture, but to enrich it. All qualified candidates will receive consideration for employment without regard to race, color, creed, religion, age, gender, national orientation, disability, sexual orientation, US Veteran status, or any other factor protected by law. If you require any reasonable adjustments during the recruitment process, please let us know.

Avalara

New Jobs

Sr. Application Security Engineer