[Skip to main content](#main-content) [OpenNash Jobs](https://jobs.opennash.com/) [Hiring report](/reports/hiring/) · [All Arista Networks jobs](https://jobs.opennash.com/companies/arista-networks/) · [Search jobs](/search/) Arista Networks · Austin, TX # Technical Lead (Threat Modeling, PSIRT) Austin, TX, United States Full-time Manager or lead Sales Listed on Arista Networks’s official careers site. Posted August 11, 2026. Check that it is still open and apply there. [Apply on Arista Networks’s careers site →](https://jobs.smartrecruiters.com/AristaNetworks/744000142917264-technical-lead-threat-modeling-psirt-) [OpenNash Jobs](https://jobs.opennash.com/) / [Arista Networks](https://jobs.opennash.com/companies/arista-networks/) / Technical Lead (Threat Modeling, PSIRT) ## Job description Who You'll Work With Arista Networks is seeking a deeply technical and operationally strategic Technical Lead, Product Security Program & Operations. In this role, you will serve as a core link between Arista’s engineering groups, external security researchers, federal stakeholders, and executive leadership. This is not a purely administrative role; it requires a strong technical background in network operating systems, exploit mechanics, and secure software development. You will drive the product security vulnerability lifecycle, lead threat modeling and penetration testing strategies for Arista’s switch architecture, integrate security mechanisms into our software development lifecycle (SDLC), and ensure our federal cloud environments maintain an aggressive security posture. ### Alternate Work Locations Dallas, TX | Raleigh, NC What Will You Do? ### Key Responsibilities - Technical PSIRT, Vulnerability & Exploit Analysis Vulnerability Lifecycle Management: Drive the end-to-end process of turning discovered or reported vulnerabilities within Arista products into verified, highly accurate security advisories. ### Technical Triage & Root Cause Analysis Triage incoming vulnerability reports from internal testing, automated tools, and external researchers. Evaluate exploitability, proof-of-concepts (PoCs), and determine blast radius/severity using CVSS and CWE frameworks. ### Developer Enablement & Advisory Partner directly with software engineers to explain root-cause vulnerabilities, provide remediation guidance, and oversee the drafting and structural validation of technical security advisories. ### Coordinated Disclosure Coordinate with the National Vulnerability Database (NVD), MITRE, and external research teams to ensure professional, precise, and timely disclosure. ### Metrics Strategy Analyze vulnerability trends to identify systemic security gaps, delivering data-driven architecture recommendations to senior engineering leadership. - Advanced Penetration Testing & Switch Architecture Security Program Oversight & Scoping: Manage the comprehensive execution of third-party security testing and red-teaming across Arista’s product portfolio. ### Architectural Threat Modeling Translate Arista’s switch architecture, control/data plane separation, and Sysdb-driven state mechanisms into clear threat vectors to scope high-value targets for penetration testers. ### Remediation & Validation Critically review penetration testing findings, distinguish theoretical risks from practical exploits, and validate that engineering fixes comprehensively eliminate the underlying architectural susceptibility to security issues. ### Executive Reporting Distill complex cryptographic, hardware, or software vulnerabilities into clear risk profiles for executive management and enterprise customers. ### Secure SDLC & DevSecOps Engineering Shifting Left - Architect, implement, and optimize security checkpoints throughout Arista’s development lifecycles to detect flaws before code reaches production. ### Pipeline Integration Drive the adoption and tuning of automated security tooling (SAST, DAST, SCA, and container scanning) directly into the CI/CD infrastructure. ### Secure Coding Standards Define and evangelize secure coding practices, threat modeling principles (e.g., STRIDE), and framework-level mitigations to mitigate common software flaws (memory unsafety, injection, privilege escalation). ### Continuous Improvement Audit existing development workflows to eliminate friction between engineering velocity and product security compliance. - Federal Cloud Security Administration & Infrastructure Monitoring Federal Workspace Administration: Securely administer and monitor the dedicated Google Workspace environment for Arista Federal. ### Compliance Hardening Configure and audit cloud infrastructure settings in strict accordance with industry frameworks and federal regulations (e.g., FedRAMP, NIST 800-53). ### Threat Hunting & Incident Response Actively monitor logging, alerting systems, and audit trails to identify, investigate, and remediate suspicious activity or misconfigurations. ### Change Management Lead security risk assessments for all proposed system alterations in coordination with Arista IT Security and Federal Management. ### Customer Trust & Regulatory Compliance Technical Customer Engagement - Act as the primary technical subject matter expert (SME) during deep-dive security discussions with enterprise and federal customers. ### Regulatory Advisory Authoritatively address complex customer compliance inquiries regarding product architecture, supply chain integrity, and federal security mandates. ## Qualifications ### Security Vulnerabilities & Exploit Theory Deep understanding of software vulnerabilities, exploit mechanics (e.g., buffer overflows, race conditions, logical bypasses, dependency vulnerabilities), cryptography, and modern mitigation techniques. Strong familiarity with standard frameworks including CVSS, CWE, OWASP Top 10, and MITRE ATT Networking & Switch Architecture: In-depth understanding of network switch architecture, composition, and management. Knowledge of network operating system internals (ideally Linux-based, such as Arista EOS), control plane protection, data plane forwarding, ASIC-level considerations, and protocols (e.g., BGP, OSPF, gRPC, SNMP). ### Secure Development & SDLC Robust knowledge of modern software engineering methodologies, version control (Git), and CI/CD pipelines. Hands-on experience integrating and managing AppSec tools (SAST/DAST) and implementing Threat Modeling practices in an enterprise environment. ### Experience & Operational Skills Experience 7+ years of experience in Product Security, Software Security Engineering, PSIRT operations, or Advanced Cloud Security Administration. ### Cloud Infrastructure Proven experience hardening enterprise/federal cloud spaces, specifically Google Workspace or major cloud providers (AWS/GCP), with an emphasis on access controls, logging, and audit logs. ### Compliance Standards Familiarity with Federal, State, and Local compliance regulations (e.g., FedRAMP, NIST, FIPS). ### Communication Exceptional ability to articulate highly technical security flaws and architectural concepts clearly to software developers, enterprise customers, and non-technical business executives alike. #LI-TC1 ## At a glance - Posted by the employer: Aug 11, 2026 - First seen by OpenNash: Oct 10, 2026 - Last checked: Oct 17, 2026 - Listed for: 67 days - Location: Austin, TX, United States - Employment type: Full-time[Apply on Arista Networks’s careers site →](https://jobs.smartrecruiters.com/AristaNetworks/744000142917264-technical-lead-threat-modeling-psirt-) ## More jobs at Arista Networks ### [BIOS Senior/Lead Software Engineer](https://jobs.opennash.com/companies/arista-networks/jobs/d61c9fbdac6babe15406/) Austin, TX, United States ### [BIOS Software Engineer](https://jobs.opennash.com/companies/arista-networks/jobs/d134fa186c7190f764cc/) Austin, TX, United States ### [Federal Technical Solutions Engineer](https://jobs.opennash.com/companies/arista-networks/jobs/e789643efe751a4d1b0e/) Austin, TX, United States ### [Linux Kernel Senior/Lead Software Engineer](https://jobs.opennash.com/companies/arista-networks/jobs/0d5c1990d2c2ade0b031/) Austin, TX, United States ### [Linux Kernel Software Engineer](https://jobs.opennash.com/companies/arista-networks/jobs/298843c93984fb8e29dc/) Austin, TX, United States ## Similar jobs at other companies ### [AI Threat Modeling Engineer](https://jobs.opennash.com/companies/tata-consultancy-services/jobs/bb859d5740c6698cc9fd/) Tata Consultancy Services · Cary, NC ### [Principal Hardware Security Architect, Advanced Technologies and Threat Modeling](https://jobs.opennash.com/companies/nvidia/jobs/03ce08e3aa0cdbe03468/) NVIDIA · US, CA, Santa Clara +1 more ### [Security Engineer II - Design Review/Threat Modeling](https://jobs.opennash.com/companies/uber/jobs/ac8409da896723501c5e/) Uber · Seattle, WA, United States ### [Senior Insider Threat Engineer](https://jobs.opennash.com/companies/humana/jobs/871da078372db33f16cb/) Humana · Louisville, Kentucky ### [Threat Assessment Manager](https://jobs.opennash.com/companies/kroger/jobs/2315b88957b921b7d57e/) Kroger · Cincinnati, OH, United States OpenNash lists jobs from employers’ own careers sites and does not handle applications. Dates come from the employer where stated; “first seen” and “last checked” are our own observations. OpenNash Jobs · Official listings with dates and links to the employer. [Weekly hiring report](/reports/hiring/) · [Methodology](/methodology/)