Security Engineer, Amazon

• The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. T
• Technically, this person will be a security specialist with one or more areas of deep expertise within application security.
• They will clearly articulate risks to technical and non-technical audiences alike. Successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions
• BS in Computer Science or related field, or equivalent work experience
• Minimum of 7 years of web application security industry experience with at least four of the following: threat modeling experience, secure coding, identity management and authentication, Web Application Security, cryptography, penetration testing, cloud security, mobile security, and network security
• Experience reading and writing in at least one programming language

Desirable

• Creating, updating, and maintaining threat models for a wide variety of web applications hosted on cloud
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Adversarial security analysis using the latest tools to augment manual effort
• Provide Security training and outreach for internal development teams
• Provide Security architecture and design guidance to application development teams
• Independently solve systemic, complex security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, strategy and choices by using data to improve security outcomes
• Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications
• As a Security Engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing novel services. In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service
• Shape the strategy of the Product Security Team and influence systemic security improvements across our service organizations.
• Guide and mentor other engineers on the team