Lead Threat Modeling & PSIRT Architect

Arista; Austin (TX); On-site; USD 150,000 - 190,000; Full time

Job summary

Arista Networks seeks a deeply technical Technical Lead for Product Security Program & Operations. You will act as a core link between engineering, external researchers, federal stakeholders, and executive leadership to drive vulnerability management and security enhancements.

This role requires hands-on expertise in exploit mechanics, secure software development, and advanced threat modeling, with responsibility for federal cloud security and compliance across Arista products.

Qualifications

• Deep understanding of software vulnerabilities, exploit mechanics, cryptography, and modern mitigation techniques.
• In-depth knowledge of network switch architecture, EOS/Linux internals, and secure network design.
• Hands-on experience integrating AppSec tools (SAST/DAST) into CI/CD and performing threat modeling.

Responsibilities

• Drive PSIRT vulnerability lifecycle from discovery to published advisories.
• Lead triage, root cause analysis, and severity assessment using CVSS and CWE.
• Collaborate with software engineers to remediate vulnerabilities and draft advisories.
• Coordinate disclosure with NVD, MITRE, and external researchers.
• Embed secure coding practices and security checkpoints throughout the SDLC.
• Oversee third-party security testing and red-teaming activities.
• Monitor and report security metrics to senior leadership.
• Secure Federal cloud environments and enforce compliance controls.

Skills

Security vulnerabilities

Networking & switch architecture

Secure development & SDLC

Tools

SAST

DAST

CI/CD

Job description

Arista Networks seeks a deeply technical Technical Lead for Product Security Program & Operations. You will act as a core link between engineering, external researchers, federal stakeholders, and executive leadership to drive vulnerability management and security enhancements.

This role requires hands-on expertise in exploit mechanics, secure software development, and advanced threat modeling, with responsibility for federal cloud security and compliance across Arista products.