Senior Security Engineer, Amazon

• 5+ years of experience in application and infrastructure security, including exposure to cloud security within AWS and GCP infrastructure
• Proficiency in understanding Go code, or other languages that support object oriented programming principles such as C++/C#, Python, and JavaScript
• Demonstrated ability to automate security tooling and integrate security checks into development workflows
• Experience driving security outcomes in large company wide programs
• Knowledge of microservices architecture, inter-service call authorization, and experience reviewing them with a security perspective
• Diverse interest and understanding in cloud, application, and infrastructure security topics

Desirable

• Twitch Security helps engineering teams across the company build and operate services for our customers and employees safely
• As a Senior Security Engineer, you will report to the Head of Product Security and help secure our services throughout the software development lifecycle
• This technical role leverages both application and infrastructure security knowledge
• You will partner with our service teams to implement secure defaults, identify security issues, and implement security fixes and improvements
• Additionally, you will partner with other Twitch Security teams, and senior leaders across Twitch and Amazon to identify opportunities to collaborate towards our security strategy
• Conduct product security assessments across all Twitch services, and help establish secure defaults. Advocate for secure outcomes in design, architecture, and development
• Own identification of ambiguous security issues across all of Twitch, scale mitigations using Amazon/Twitch tools and security frameworks
• Collaborate with peer security teams to influence and scale security efforts earlier in the software development lifecycle
• Perform reviews throughout the product and infrastructure development lifecycle, including but not limited to: design review, threat modeling, attack surface identification, vulnerability assessment and remediation
• Work on strategic security programs to engage on large security anti-patterns
• Play co-op and help grow security engineers across the company. Bring new ideas emerging throughout the information security field