Product Security Engineer, Amazon

• Bachelor's degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience applying threat modeling or other risk identification techniques or equivalent
• Experience with programming languages such as Python, Java, C++

Desirable

• A security engineer in Payments Security team will work closely with application developers, evangelize security and build scalable detection and prevention mechanisms that help secure applications
• Payments Security team's mission is to build mechanisms that help prevent security issues from affecting Amazon's Payment Applications
• Work closely with service teams to identify threats and vulnerabilities throughout Software Development Life Cycle and provide guidance on mitigating the issues
• Identify and prioritize security problems that can be detected using automation
• Develop detection prototypes for these security problems to enhance our tool-set for static and dynamic analysis
• Work with builders and service teams to address detected security problems in an appropriate and timely fashion
• Identify opportunities to prevent security problems at scale
• Develop prototypes to prevent these security problems
• Document and provide security guidance that will be used across Amazon Payments
• Deliver metrics to show effectiveness of our security initiatives