Senior Security Engineer, Amazon

• Are you inspired by the prospect of work that has a tangible impact on customers, teams, and businesses worldwide?
• Is your expertise in dissecting complex systems, ranging from embedded software to cloud services, matched by a zeal for uncovering product vulnerabilities?
• If the thrill of automating vulnerability detection and scaling its reach excites you then we have the perfect opportunity for you
• CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+
• Knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, and devices and application security
• Experience as a mentor, technical lead, or leading an engineering team
• Proven experience in threat modeling, code reviews, security testing, vulnerability detection, attacker exploit techniques, and methods for their remediation

Desirable

• Amazon’s Security team is on the hunt for a Sr Security Engineer
• This pivotal role is designed for those who are fervent about engineering scalable security solutions with significant impact
• In this position, you will pioneer technologies and frameworks that cater to the unique security demands of various builder teams at Amazon
• As an integral member of a committed team of security experts, you will engage in vulnerability research and analysis, and craft automation strategies to pinpoint vulnerabilities
• Your mission will involve developing sophisticated security testing capabilities to identify and mitigate risks throughout the Software Development Life Cycle (SDLC)
• Your goal is to deeply understand systems, software, and services, innovating ways to detect vulnerabilities and formulate preventive measures
• Embracing automation, you will minimize manual processes, thereby elevating our internal customers’ security standards
• You will collaborate with development teams to deliver solutions that simplify the creation and management of secure systems
• As a leader, you will ensure that Amazon’s products consistently earn customer trust
• You will spearhead the exploration of industry leading solutions to complex challenges
• Your influential voice will guide the strategic direction of automated security tools within Amazon
• Scaling vulnerability detection by inventing, developing and improving custom high quality automated detection tools (e.g. static analyzers, fuzzers, scanners, etc.) to perform variety of security vulnerability (SAST, DAST etc.) analysis
• Providing actionable long-term risk mitigation guidance as well as engineering auto-remediation capabilities to drive security improvements at scale
• Making strategic decisions on new security detection solutions which should be pursued for scaling security in builder organizations
• Proposing mechanisms for integrating security detection tools into the development life-cycle
• Inventing advanced security detection tools which developers can use to self-discover and avoid security vulnerabilities and misconfigurations
• Advising managers, directors, and peers on automated security detection matters and influence development teams to adopt detection capabilities
• Independently tackling large cross-cutting security issues affecting multiple builder orgs. Prioritize and develop security issue detection, collaborating with partner orgs to address unique requirements
• The role of a Sr Security Engineer on the Detection Engineering team is to ensure that Amazon’s products are developed securely in order to maintain our customers’ trust
• They work on developing automated detection capabilities in all stages of the SDLC which help developers discover and address security mistakes
• Detection Engineers develop independent, continuous and automated security verification detection capabilities for their customers (partners and builder teams)
• They collaborate with subject matter experts across SBS Sec, Stores Sec, AWS Sec, and the development organizations they support to evolve and scale automated detection capabilities
• They work on and contributing to the established AmSec security detection ecosystem which orchestrates the execution and converges the output of automated detection tools
• They also allow for easy access to information regarding comprehensive security health metrics for orgs/applications and on-demand intelligence reporting
• And finally, they drive remediation to reduce the overall risk to the businesses they support and ultimately protect Amazon’s customers

• This position will remain posted until filled