Senior Security Engineer, Amazon

• Engineers in this role must show exemplary judgment in making technical trade-offs between short-term fixes and long-term security and business goals
• You will demonstrate resilience and navigate ambiguous situations with composure and tact
• Above all else, a strong sense of customer obsession is necessary to focus on the ultimate goal of keeping Amazon and its customers secure
• Experience in a penetration testing or similar offensive security role
• Experience with security engineering practices, including: web application security, network security, authentication and authorization protocols, cryptography, automation, and other software security disciplines
• Experience with dynamic and manual code auditing to identify security issues
• Experience with interpreted or compiled languages (e.g. Python, Ruby, C/C++, Java, .NET)
• Experience with threat modeling, design review, or other threat analysis techniques - Bachelor’s degree in Computer Science or related field, or equivalent industry experience

Desirable

• Amazon’s Information Security Penetration Testing Team is seeking a Security Engineer to help keep Amazon secure for its customers
• In this role, you will attack Amazon’s services, applications, and websites to discover security issues and report them to our internal technology teams
• This position will provide you with challenging opportunities, both technologically and as a leader, but will also be a great deal of fun if hacking Amazon alongside a team of highly skilled individuals sounds exciting to you
• A Security Engineer at Amazon is expected to be strong in multiple domains
• Engineers in this role work closely with teams throughout Information Security, as well as provide technical leadership and advice to teams and leaders throughout Amazon
• You will be in direct contact with teams in a variety of business verticals, giving you first hand knowledge about how Amazon is built and how it operates at a deep, technical level
• Additionally, you will leverage the knowledge you gain about Amazon to find new ways to break services, processes, and technologies throughout the company
• You will be expected to provide thought leadership for the organization as you discover, invent, and innovate throughout the course of your duties
• Overseeing high quality application penetration tests independently, or as part of a team
• Creating detailed engagement plans and thoroughly documenting findings, gaps, and remediation recommendations
• Developing and implementing improvements to team tooling, innovation, and processes
• Influencing team strategy, direction, and priorities
• Advancing strategic initiatives by influencing leadership, key stakeholders, and partnering with teams throughout Amazon
• Leading effective teamwork, communication, collaboration and commitment across multiple disparate groups with competing priorities
• Communicating and collaborating with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings