InfoSec Cloud Security Engineer

About Us

Avenue One is a service platform and marketplace that enables investors to access single-family rental residential assets by connecting an ecosystem of local partners to institutional capital. We are in the business of partnerships—finding, vetting, and empowering local experts nationwide to broker, find, buy, renovate, lease, manage, and sell properties on behalf of our clients.

We coordinate the efforts of our partners through a proprietary technology stack. This system takes in huge amounts of data at national and local levels, which, combined with information about each individual property, gives us and our partners a competitive advantage in pricing, speed, and scale. The technology is constantly evolving to remain best-in-class, but it will only be as good as our team that drives it, which is where you come in.

Avenue One provides equal employment opportunities to all employees and applicants for employment and prohibits discrimination and harassment of any type without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, familial status, or any other characteristic protected by federal, state, or local laws. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training.

Location

• U.S/Canada
• Remote

Experience / Qualifications

• Bachelor’s Degree or major in Computer Science, Information Technology or a related discipline
• 3 or more years of professional experience in a cyber security, information security or IT risk consulting role
• 3 or more years of experience in application-level vulnerability testing and code-level security auditing
• Deep knowledge and experience implementing security measures in AWS
• Knowledge of Identity Management and multi-SaaS vulnerability mitigation
• CISSP, CEH, CISM, AWS Certified Security Certification(s), or similar certifications
• Experience with implementing/certifying for SOC 2 Type 2
• Experience with securing API endpoints
• Experience in modern coding languages and frameworks such as Python, Node, React
• Familiarity with common security and control frameworks such as Zero Trust, NIST, ISO
• Ability to successfully manage working on multiple simultaneous projects

Job Description

• Responsible for designing, documenting, creating, and analyzing configurations, rules, and monitoring alerts associated with systems security and SaaS applications
• Advocate security and secure practices throughout the organization
• Conduct security, vulnerability
• y and risk reviews of systems through the use of automated tools and manual testing procedures, investigating, and responding to security incidents
• Performing root cause analysis on identified vulnerabilities and identified incidents
• Performing log reviews, monitoring system alerts, and documenting incidents

Salary Range 

The base pay range for this role is estimated to be 130k - 150k USD. Final compensation will be determined by various factors such as work location, education, experience, knowledge, and skills.

Compensation / Benefits

• Competitive compensation 
• Company-paid medical, vision, dental, and wellness benefits for employees and dependents
• Company-provided home office equipment
• Flexible vacation and sick days
• Team-oriented and supportive working environment
• Company-sponsored events and swag