[Hiring] Senior Security Engineer @Amazon

Role Description

As a Senior Security Engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing novel services. In a given day, you might be:

• Inspecting an application’s code for security issues
• Building a new framework to help our software developers build faster and more securely
• Fine-tuning the design for a new service alongside its software developers

The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. This person will be a security generalist with one or more areas of deep expertise, clearly articulating risks to technical and non-technical audiences alike.

Successful candidates will effectively harmonize disparate opinions while prioritizing risks to guide their partners towards secure solutions.

Key job responsibilities include:

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python, and JavaScript
• Development of security automation tools
• Adversarial security analysis using innovative tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solving security problems that require novel methods or approaches
• Influencing your team’s and partners’ process, priorities, and choices to improve outcomes

Qualifications

• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• 5+ years of work in identifying security issues and risks, and developing mitigation plans
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• 8+ years of Application Security or Development experience

Requirements

• Experience with security in service-oriented architectures/microservices and web services
• CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription)
• Basic Life & AD&D insurance and option for Supplemental life plans
• EAP, Mental Health Support, Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave