Senior Security Engineer, Amazon

• Experience creating detections across host, network and cloud utilizing a wide array of data sources
• Experience improving accuracy of vulnerability detection mechanisms across a diverse technical ecosystem
• Experience in three of the following areas: edge and delivery security (DDoS, CDNs, etc.), mobile applications, device security, threat modeling, authentication, web and network protocols, data structures and algorithms, application security, code reviews, software development, penetration tests, or vulnerability assessments
• Excellent analytical and interpersonal skills, with ability to communicate clearly and effectively with developers, product managers, and senior business leaders with security metrics to influence decisions
• You must thrive in high-pressure situations, and think like both an attacker and defender, while working through the detection life cycle

Desirable

• Responsible for designing high-fidelity detections that focus on threats specific to the Media, Games, and Entertainment industries
• You’ll be working in a global team environment where clear and accurate communication and collaboration on security issues is critical
• Analyze public and private vulnerability disclosures and exploit code
• Author and validate safe, scaleable, and accurate vulnerability detection mechanisms
• Design software and mechanisms that continuously raise the safety and confidence bar for the vulnerability detection ecosystem
• Demonstrate engineering, design, and security technical leadership, mentoring peer and partner engineers
• Collaborate with partners across Amazon to develop scalable solutions to security problems
• Periodic on-call responsibilities
• A day in the life:
• You will be seen as a strong leader who prioritizes well, communicates clearly and compellingly understands how to drive a high level of operational and strategic excellence within a team, while collaborating with a variety of internal and external business partners
• You must show exemplary judgment in making technical trade-offs between short- versus long-term security and business goals
• A successful candidate must be one that can handle several difficult challenges and problems, can make risk-based assessments founded on data and facts rather than older static based security paradigms, though being aware of the older best practices