Security Engineer, Amazon

• The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly
• Technically, this person will be a security generalist with one or more areas of deep expertise
• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques
• Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)
• Experience with explaining complex technical risks in simple, clear language so that non-technical stakeholders can easily understand and take appropriate action
• Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply

Desirable

• As a Security Engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing these novel services. In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service alongside its software developers
• In their communication, they will clearly articulate risks to technical and non-technical audiences alike
• Interpersonally, successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions
• Define and drive implementation of proactive security controls for SDO's most critical, Ring 0 applications
• Evaluated and implement security controls, ensuring Ring 0 developers build secure applications by default
• Assess and drive mitigation of security risks
• Build and/or drive adoption of security tooling (e.g., automated threat modeling, code scanning, security test generation) to scale security across SDO AppSec
• Drive adoption of security guardrails, testing frameworks, and monitoring across Ring 0 applications
• Collaborate with Ring 0 builder teams to integrate security guidance into development workflows, reducing late-stage security findings
• Develop and maintain security documentation including threat models, risk assessments, and secure development guidelines
• Support security incident investigations related to Ring 0 systems
• Performing manual and automated secure code review (Java, Python, JavaScript)
• Identifying and mitigating security issues at scale
• Performing adversarial security analysis
• Providing security guidance to internal development teams, stakeholders, and business leaders
• Independently solving complex security problems
• At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services
• We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores