Security Engineer, Amazon

• The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly
• Technically, this person will be a security generalist with one or more areas of deep expertise. In their communication, they will clearly articulate risks to technical and non-technical audiences alike
• BS in Computer Science or related field, or equivalent work experience
• Minimum of 3 years of experience with at least two of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, penetration testing, cloud security, mobile security, and network security
• Intermediate knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, or application security
• Experience reading and writing in at least one programming language
• You demonstrate excellent judgement in assessing and prioritizing technical risk

Desirable

• As an AppSec engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing these novel services
• In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service alongside its software developers
• Interpersonally, successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions
• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
• Development of security automation tools
• Adversarial security analysis using cutting-edge tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes