Security Engineer, Amazon

• You will need a combination of technical and communication skills as well as a cutomer-focused mindset and a desire to continue to grow and learn from those around you
• Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language
• Bachelor's degree in computer science or equivalent

Desirable

• Amazon Information Security is looking for an Application Security Engineer to join our Appsec Acquisitions team
• You will have the opportunity to ensure security of applications that are under consideration for merger or acquisition
• Our team approaches security challenges with empathy and curiosity to help service teams identify areas of improvement and guidance on how to remediate risk
• Amazon Application Security focuses on enabling our builders to provide a secure and trustworthy experience to our customers without compromising the overall customer experience
• As a Security Engineer on our team, you will solve interesting security challenges that arise when Amazon acquires new businesses
• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Adversarial security analysis using modern tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes