Security Engineer, Amazon
Specialized Businesses Security, Vulnerability Management
$136-212.8k
The largest online retailer and technology provider
Open for applications
The largest online retailer and technology provider
1001+ employees
Open for applications
$136-212.8k
1001+ employees
Company mission
To be Earth's most customer-centric company.
Role
Who you are
- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Bachelor's degree in computer science or equivalent
- 3+ years hands-on experience in Vulnerability Management, Product Security and/or Application Security
Desirable
- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience with AWS products and services
- Knowledge of common software security vulnerabilities (memory corruption, privilege escalation, web application exploitation, protocol-based weaknesses, etc.) and analyzing their impact
- Working experience with vulnerability detection tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Open Source Composition Analysis (SCA)
- Experience with scripting (Python bash, etc.)
What the job involves
- Amazon’s Specialized Businesses Security team is seeking an innovative Security Engineer to join our Vulnerability Management Dectection Team
- In this position, you will focus on detection, assessment, triage and supporting remediation of vulnerabilities. You will work with a diverse set of security scanning tools to support our application security vulnerability detection capabilities
- You will work with a diverse set of security scanning tools to support our application security vulnerability detection capabilities
- Your goal will be to deeply understand Amazon’s innovative Devices and Services to enhance our vulnerability detection capabilities throughout the Software Development Lifecycle (SDLC)
- You will partner with development teams to drive prioritization and remediation of vulnerabilities to help deliver secure products for our customers
- Developing and tuning custom, open source and third-party high quality automated detection tools (e.g. static analyzers, fuzzers, scanners, etc.) to perform variety of security vulnerability analysis (SAST, DAST, SCA, etc.)
- Reviewing output of automated detection tools for accuracy
- Analyzing public and private vulnerability disclosures to analyze impact on Amazon Devices and Services
- Providing actionable long-term risk prioritization and mitigation guidance to drive security improvements at scale
- Proposing mechanisms for integrating security detection tools into the development lifecycle
- Collaborate with partners across Amazon to develop scalable solutions to security problems
Our take
Amazon is the world's largest online retailer, and is well-known for its disruption of well-established industries. The company is present in numerous verticals, including cloud computing with Amazon Web Services, AI with its range of Alexa devices and a global marketplace more commonly referred to as 'the everything store'. Acquisitions include Ring, Twitch, Whole Foods Market, and IMDb.
More recently, Amazon has been focused on leading the "third wave in digital advertising". Many businesses are now shifting ad dollars to retailers, which before would have been spent with online media platforms. Amazon's seen great success in the space, with its revenue from advertising now higher than its Amazon Prime membership scheme, audiobooks and digital music combined. This growth is particularly impressive considering its digital ad rivals (like Snap, Alphabet, and Meta) have suffered declines due to wider macroeconomic factors and Apple's iOS privacy changes.
Despite its dominant market position, Amazon will continue to be challenged over the next decade, including sustaining AWS's cloud dominance in the face of Google and Microsoft. On top of this, the company's e-commerce division is facing profitability problems despite its 2023 post-IPO debt funding of 8 billion. It will need to find new ways to stay above their competitors.
Steph
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Company HQ
South Lake Union, Seattle, WA
Leadership
Jeff Bezos
(Founder & Executive Chairman)Jeff is an American business magnate, media proprietor, and investor. As well as founding Amazon, Jeff founded Blue Origin, an aerospace manufacturer and sub-orbital spaceflight services company and also owns The Washington Post.
Andy Jassy
(President & CEO)Joined Amazon as a Marketing Manager in 1997. Developed AWS with Jeff Bezos, and became CEO of Amazon in 2021.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 178 more jobs at Amazon