Security Engineer, Amazon

• Bachelor's degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language
• Experience applying threat modeling or other risk identification techniques or equivalent

Desirable

• Corporate Services Security (CPSS) is the Amazon security team aligned with Finance & Global Business Services (FGBS), People eXperience & Technology (PXT), Legal and Global Communications and Community Impact (GCCI) business units
• Our Mission is to protect and safeguard Amazon's corporate services, systems, and data
• Through proactive engagement with the development teams, we understand the dynamic business processes that run Amazon, and enable our stakeholders to innovate, build, and scale securely
• The Product Security Team within CPSS supports a large number of applications built using AWS Services
• Apart from work, we provide opportunities for our engineers to pursue projects they are passionate about while maintaining work life harmony
• Creating, updating, and maintaining threat models for a wide variety of web applications hosted on cloud
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Adversarial security analysis using the latest tools to augment manual effort
• Provide Security training and outreach for internal development teams
• Provide Security architecture and design guidance to application development teams
• Independently solve systemic, complex security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, strategy and choices by using data to improve security outcomes
• Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications