Cloud Security Engineer at Avalara
$136,400–$225,000
Jul 7, 2026
—
Jul 20, 2026
What this job asks for AI summary
A cloud security engineering role focused on building automated, scalable security controls across multi-cloud environments. Day-to-day work involves writing infrastructure as code (Terraform), Python scripting, and developing event-driven automation and data pipelines to detect and remediate risks and misconfigurations. The role also covers cloud incident response support and collaboration with engineering teams to embed security into delivery workflows. Suits engineers comfortable working across cloud platforms with a hands-on, build-oriented approach.
Mid level · Remote · Full-time
“or” means any one of them counts — you don't need all of them.
We read this from the posting text with AI. Skim the description below before ruling yourself out.
How this req sits in the market our data
Roughly 2,400 people nationally plausibly meet what this posting asks for (information security analysts). range 1,450–3,600
Applicant volume Moderate — A normal amount of company. The rare requirements below are what will separate a shortlisted application from the rest.
Rare in this occupation — lead with these, and say what you built with them.
Most people in this occupation already list these. Still required — just not what gets you shortlisted.
What the occupation pays Median $132,021 (middle half $99,961–$167,095).
Estimated from BLS employment for this occupation and area, per-skill prevalence across our listing corpus, and published wage benchmarks — as of Jul 28, 2026. It is a model, not a headcount.
Why we read it this way (7)
This role sits at the boundary between security engineering (15-1212) and software development (15-1252). The primary framing is cloud security posture, guardrails, and incident response, but the day-to-day work — building Terraform-based controls, event-driven automation, and data pipelines — is heavily engineering-oriented. 15-1212 was chosen because security outcomes and risk reduction are the stated mission; 15-1252 is a credible runner-up.
The degree requirement ('Degree in Information Systems, Information Security, or a related field, or equivalent practical experience') explicitly accepts equivalent experience, so no minimum degree is flagged.
AWS (or another hyper-scale cloud provider) is required; the JD demands experience in 'at least one hyper-scale cloud provider.' AWS is used as the primary name with Azure/GCP as alternatives. Azure, GCP, and OCI appear only under 'You May Also Have' (multi-cloud familiarity) and are listed separately as preferred.
Wiz is named in the responsibilities section as an example tool ('tools like Wiz') rather than a hard gate, and is reinforced under 'You May Also Have' — treated as preferred.
Compliance frameworks (SOC 2, PCI-DSS, NIST, ISO 27001) and certifications (CISSP, CISA, CISM, cloud provider certs) appear only under 'You May Also Have' — treated as preferred.
No compensation figures are provided in the posting.
Caller marked this a fully-remote role — scored against the national candidate pool.
Read the full posting
The employer publishes the full description on their own site — read it there ↗. Or sign in to read it here — it's free, and it also lets you track this application.