Technical Lead (Threat Modeling, PSIRT)

Arista Networks
Austin, Dallas, Raleigh
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceExperience: 7+ yearsSkills: ["Technical communication","Analytical thinking","Customer engagement","Operational ownership"]

Drive Arista’s product security vulnerability lifecycle as a PSIRT technical lead, coordinating triage, exploit analysis, coordinated disclosure, and security advisory creation. Oversee advanced penetration testing and threat modeling for switch architecture, ensuring findings translate into validated engineering fixes. Architect secure checkpoints across SDLC/CI/CD with DevSecOps tooling, and administer federal Google Workspace security—supporting monitoring, compliance hardening, threat hunting, and incident response while engaging enterprise and federal customers.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Arista Networks
Arista Networks
6 hours ago

Technical Lead (Threat Modeling, PSIRT)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 5 hours agoStatus: Live

Job Summary

Drive Arista’s product security vulnerability lifecycle as a PSIRT technical lead, coordinating triage, exploit analysis, coordinated disclosure, and security advisory creation. Oversee advanced penetration testing and threat modeling for switch architecture, ensuring findings translate into validated engineering fixes. Architect secure checkpoints across SDLC/CI/CD with DevSecOps tooling, and administer federal Google Workspace security—supporting monitoring, compliance hardening, threat hunting, and incident response while engaging enterprise and federal customers.
Location: Austin, Dallas, Raleigh
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Drive end-to-end vulnerability lifecycle management, turning discovered/reported vulnerabilities into verified security advisories.
  • •Triaging and performing technical triage/root-cause analysis of vulnerability reports, evaluating exploitability, PoCs, and severity/blast radius using CVSS and CWE.
  • •Oversee threat modeling and advanced penetration testing/red-teaming across the product portfolio, translating switch architecture into scoped threat vectors and validating remediations.
  • •Architect and integrate security checkpoints across SDLC/DevSecOps, driving adoption and tuning of SAST/DAST/SCA and container scanning in CI/CD and evangelizing secure coding/threat modeling practices.
  • •Administer and monitor federal cloud security for Arista Federal (Google Workspace), including compliance hardening (FedRAMP/NIST), threat hunting/incident response, and leading security change risk assessments while engaging customers on technical compliance inquiries.

Key Requirements

  • •7+ years of experience in product security, software security engineering, PSIRT operations, or advanced cloud security administration.
  • •Proven experience hardening enterprise/federal cloud environments, specifically Google Workspace or major cloud providers (AWS/GCP), with emphasis on access controls, logging, and audit logs.
  • •Familiarity with Federal/State/Local compliance regulations such as FedRAMP, NIST, and FIPS.
  • •Deep understanding of software vulnerabilities and exploit mechanics (e.g., buffer overflows, race conditions, logical bypasses, dependency vulnerabilities) including cryptography and modern mitigations.
  • •In-depth knowledge of network switch architecture and network operating system internals (ideally Linux-based like Arista EOS), including control/data plane protection and protocols such as BGP, OSPF, gRPC, and SNMP.
Experience:7+ yearsProduct securityPSIRTCloud securityFederal compliance
Skills:Technical communicationAnalytical thinkingCustomer engagementOperational ownership
Languages:English
Tech Stack:Threat modelingPSIRTVulnerability lifecycle managementCVSSCWENVDMITREOWASP Top 10STRIDEFedRAMPNIST 800-53FIPSGitCI/CDSASTDASTSCAContainer scanningGoogle WorkspaceAWS

Company Brief

Arista Networks
Designs and sells high-performance cloud networking hardware and software for large-scale data centers and enterprise environments, including switches, routers, and network operating systems focused on programmability, telemetry, and low-latency networking.
Industry: Networking Equipment
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Santa Clara, United States
Founded: 2004
Glassdoor
Glassdoor: 4.1
WebsiteLinkedIn