Senior Cybersecurity Engineer (Software Security)

Avetta's SaaS platform connects the world's leading organizations with qualified suppliers, contractors, and vendors. We bring unmatched visibility to companies through cloud-based technology and human insights. As a result, we foster sustainable growth for businesses and their supply chains. Our SaaS subscription software is used by 85k+ active customers in over 100 countries.

SUMMARY :

Avetta is seeking an experienced and highly skilled Senior Cybersecurity Engineer to join our team. In this role, you will serve as a key technical contributor driving the maturity and effectiveness of our security program and AI initiatives. You will architect, build, and operationalize advanced security controls, partnering closely with R&D, development, and architecture teams to embed security throughout the software development lifecycle and strengthen our defense-in-depth strategy.

We are looking for an engineer who proactively identifies emerging threats, evaluates and implements modern security technologies including driving the use of AI, and elevates our capabilities through innovative problem solving and continuous improvement. This role will also provide technical guidance to peers, influence secure engineering practices, and support critical cybersecurity functions such as vulnerability management, detection and response, identity and access management, and audit / compliance efforts. Your work will directly shape and enhance the security posture of the organization.

Preference will be given to candidates who reside within a commutable distance to Avetta's Lehi, UT office (3300 Triumph Blvd, Suite 800, Lehi, UT 84043) and are able to follow a hybrid work schedule of three days in-office and two days remote each week.

ESSENTIAL DUTIES AND RESPONSIBILITIES :

• Design, automate, and validate security controls across enterprise, cloud, and product environments to enhance defense-in-depth
• Lead efforts to embed security into CI / CD pipelines and development workflows, partnering with engineering to mature DevSecOps practices
• Evaluate, implement, and operationalize cybersecurity platforms and tooling
• Establish and enforce secure configuration baselines and system hardening standards
• Serve as a security engineering point-of-contact for internal teams, providing expert guidance and mentoring less experienced engineers
• Review and improve infrastructure-as-code, pipelines, and automation frameworks to ensure secure design and deployment practices
• Own vulnerability and misconfiguration lifecycle policies and procedures
• Identify and recommend secure use cases for AI / ML technologies within the business, ensuring safe and compliant adoption
• Monitor industry threat trends and provide proactive recommendations
• Review business initiatives, architecture proposals, and roadmaps to identify security risks and design scalable mitigation strategies
• Contribute to and refine security policies, standards, and operating procedures; promote adoption across engineering teams

PREFERRED QUALIFICATIONS :

Knowledge & Application

Complexity & Problem Solving

Collaboration & Interaction

IDEAL EDUCATION & EXPERIENCE :

#LI-HYBRID