Senior Security Engineer, Amazon

• The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly
• Technically, this person will be a security specialist with one or more areas of deep expertise within application security
• BS in Computer Science or related field, or equivalent work experience
• Minimum of 7 years of experience with at least two of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, penetration testing, cloud security, mobile security, and network security
• Intimate knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, or application security
• Experience reading and writing in at least one programming language

Desirable

• Corporate Services Security (CPSS) is the Amazon security team aligned with Finance & Global Business Services (FGBS), People eXperience & Technology (PXT), Legal, and Global Communications and Community Impact (GCCI) business units
• Our Mission is to protect and safeguard Amazon's corporate services, systems, and data
• Through proactive engagement with the development teams, we understand the dynamic business processes that run Amazon, and enable our stakeholders to innovate, build, and scale securely
• The Product Security Team within CPSS supports a large number of applications built using AWS Services
• Apart from work, we provide opportunities for our engineers to pursue projects they are passionate about while maintaining work life harmony
• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Adversarial security analysis using tools to augment manual effort
• Provide Security training and outreach for internal development teams
• Provide Security architecture and design guidance to application development teams
• Independently solve systemic, complex security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices by using data to improve security outcomes
• Provide technical and strategic guidance to senior leaders and stakeholders through effective oral and written communications
• As a Senior Security Engineer, you will collaborate with SW development teams to ensure we keep our customers safe while developing novel services
• In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service
• They will clearly articulate risks to technical and non-technical audiences alike
• Successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions
• They will shape the strategy of the Product Security Team and influence systemic security improvements across our service organizations

• This position will remain posted until filled