Responsibilities

Avante is hiring its first dedicated Security Operations Engineer. This is a senior, hands-on role accountable for the security of our production platform: identifying vulnerabilities across our code, cloud infrastructure, and dependencies, remediating them directly, and ensuring we detect and respond to threats within the timelines we have committed to our customers.
We evaluate candidates on demonstrated ownership of production security rather than years of experience. Within your first year, success means high-priority findings move through a repeatable process to verified fixes, zero-day vulnerabilities are patched quickly, alerts reach the right responder with clear context, and recurring remediation requires substantially less manual effort.
Take findings through to verified fixes. Triage vulnerabilities and cloud configuration issues by exposure and impact. Reproduce the problem, patch code and dependencies, change infrastructure, and verify the fix in production. Avante has recently implemented Wiz which will accelerate this process. Every significant finding gets an owner and a clear path to closure.
Own detection and paging. Lead the process and tooling that decides what we detect, who gets paged, and what happens next. Partner with engineering leadership so zero-day vulnerabilities are patched as soon as they're disclosed and within our contractual response times. Write runbooks people can use, and help investigate and contain incidents.
Run our cloud security platform. Keep the tooling that finds vulnerabilities and misconfigurations across our environment healthy, and make sure its findings turn into fixes instead of backlog.
Secure the path to production. Improve scanning for code, dependencies, containers, secrets, and infrastructure changes. Automate triage and remediation where it helps, and test that our checks catch real problems without avoidable noise.
Test how our systems can be misused. Run scoped API and application security testing, validate penetration-test findings, and lead red-team exercises, whether through a vendor, AI agents, or your own testing. Work with engineers on authentication, authorization, tenant isolation, and sensitive-data handling.
Make agent access safer. Define and implement identities, permissions, approval boundaries, and audit trails for our agents. Work out how untrusted inputs and tool access could lead to unintended actions or data exposure, and close those paths.
Use AI in your own security work. Use AI tools and agents to triage, investigate, and write fixes faster, with clear checks on what they produce and tight limits on what they can access.
Keep security progress visible. Maintain a prioritized engineering backlog with Trust and platform partners, explain remaining risk in plain terms, and evaluate new tools against specific gaps and operating costs.

Senior Security Operations Engineer at Avante · LumiJobs

Senior Security Operations Engineer

Responsibilities

Qualification

Required

Preferred

Benefits

Company

Avante

More roles at Avante