Technical Lead, Product Security (DevSecOps)

Arista Networks
Austin, Dallas, Raleigh
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceExperience: 7+ yearsSkills: ["Communication","Technical advisory","Threat modeling","Incident response","Cross-functional collaboration"]

Lead product security program and operations by driving PSIRT-style vulnerability lifecycle management, triage, and exploit analysis. Oversee penetration testing and threat modeling for Arista switch architectures, partnering with engineers on remediation and advisory drafting. Architect “shift-left” DevSecOps security checkpoints, integrate SAST/DAST/SCA into CI/CD, and administer security for a federal Google Workspace environment. Serve as a technical SME for enterprise and federal customer security and compliance discussions.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Arista Networks
Arista Networks
6 hours ago

Technical Lead, Product Security (DevSecOps)

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 4 hours agoStatus: Live

Job Summary

Lead product security program and operations by driving PSIRT-style vulnerability lifecycle management, triage, and exploit analysis. Oversee penetration testing and threat modeling for Arista switch architectures, partnering with engineers on remediation and advisory drafting. Architect “shift-left” DevSecOps security checkpoints, integrate SAST/DAST/SCA into CI/CD, and administer security for a federal Google Workspace environment. Serve as a technical SME for enterprise and federal customer security and compliance discussions.
Location: Austin, Dallas, Raleigh
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Mid level

Key Responsibilities

  • •Drive end-to-end vulnerability lifecycle management by triaging reports, evaluating exploitability and severity (CVSS/CWE), and producing accurate security advisories.
  • •Lead technical PSIRT functions including coordinated disclosure with NVD, MITRE, and external research teams, and provide developer enablement and remediation guidance.
  • •Oversee advanced penetration testing and red-teaming, translating switch architecture details into threat vectors and validating engineering fixes against root architectural susceptibility.
  • •Architect and optimize secure SDLC/DevSecOps “shift-left” security checkpoints, integrating SAST/DAST/SCA and container scanning into CI/CD to prevent flaws from reaching production.
  • •Administer and monitor federal cloud security for a dedicated Google Workspace environment, hardening configurations (FedRAMP/NIST 800-53), monitoring logs/alerts, and supporting incident response.

Key Requirements

  • •7+ years of experience in product security, software security engineering, PSIRT operations, or advanced cloud security administration.
  • •Proven ability to harden enterprise/federal cloud environments, specifically Google Workspace or major cloud providers (AWS/GCP), with strong access control and logging/audit log experience.
  • •Familiarity with Federal compliance standards and frameworks including FedRAMP, NIST 800-53, and FIPS.
  • •Deep understanding of software vulnerabilities and exploit mechanics (e.g., buffer overflows, race conditions, logical bypasses, dependency vulnerabilities) plus modern mitigation techniques.
  • •Strong knowledge of networking and switch architecture, including Linux-based network operating system internals (e.g., Arista EOS), control/data plane protection, and protocols such as BGP, OSPF, gRPC, and SNMP.
Experience:7+ yearsDevSecOpsProduct securityPSIRTCloud securityFederal security
Skills:CommunicationTechnical advisoryThreat modelingIncident responseCross-functional collaboration
Languages:English
Tech Stack:CI/CDSASTDASTSCAContainer scanningGitGoogle WorkspaceAWSGCPFedRAMPNIST 800-53NVDMITRECVSSCWEOWASP Top 10MITRE ATT&CKSTRIDEArista EOSLinux

Company Brief

Arista Networks
Designs and sells high-performance cloud networking hardware and software for large-scale data centers and enterprise environments, including switches, routers, and network operating systems focused on programmability, telemetry, and low-latency networking.
Industry: Networking Equipment
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Santa Clara, United States
Founded: 2004
Glassdoor
Glassdoor: 4.1
WebsiteLinkedIn