Senior Security Engineer, Amazon

• BS degree in Computer Science, Computer Engineering or related degree; or 5+ years equivalent technology experience
• 5 years hands-on Security Engineering experience, with at least 3 years in vulnerability management
• 5 years experience building, operating, and maturing large-scale security systems or services
• 5 years experience building and troubleshooting cloud-based services
• 5 years experience programming with Python or Java

Desirable

• Amazon Vulnerability Management and Remediation (VMR) is looking for a Senior Security Engineer to join our Vulnerability Management Response Team
• As a Security Engineer in VMR Response, you will play a hands-on role in the proactive identification and remediation of security issues at Amazon
• You will be part of a global-scale vulnerability response service supporting a diverse technical ecosystem
• Your teammates are an international group of security engineers, software developers, and technical program managers dedicated to continuously raising the security bar
• You are considered a technical leader on VMR and deliver high quality products, sometimes through others
• You intake, and evaluate vulnerabilities, misconfigurations, and weaknesses, assisting junior engineers
• You craft and deploy security campaigns, assisting junior engineers
• You participate in on-call rotations
• You engage autonomously with product and system owners to help create, build and innovate campaigns, possibly by writing code, scripts, creating detections, etc
• Your work focuses on large, ambiguous security problems in internal and partner-org security services or initiatives
• Representing VMR, you bring perspective and provide context for current security best practices and the costs associated with them
• You understand that not all security problems are new (or require new tools)
• You make risk-based trade-offs with larger-scale impact, with strong knowledge of compensating controls
• You fix deficiencies proactively and/or propose large projects, mindful of resources, which may require the work of VMR and other teams related by architecture
• You are able to split work into parallel tasks performed by you and others to accomplish more
• You are able to design or write code that delivers security automation
• You have significant domain expertise in three or more core CBK areas and secondary specializations, (e.g. infrastructure security, threat intelligence, security operation, endpoint security, or identity management)