Security Engineer, Amazon

• We're looking for individuals who are passionate about security, eager to learn, and ready to tackle complex challenges
• You'll be joining a team that values innovation, embraces new ideas, and consistently strives to improve our security infrastructure
• While prior IAM experience is not required, we seek candidates who demonstrate strong analytical abilities, excellent communication skills, and a genuine interest in identity security
• If you're excited about starting your security career in an environment where you can make a significant impact while learning from industry experts, we want to hear from you!
• 2+ years of web protocols, common security attacks, and remediation (non-internship) experience
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance

Desirable

• We are seeking a Security Engineer to join Amazon's Identity and Access Management (IAM) team
• In this role, you'll collaborate with experienced engineers to participate in architectural reviews and threat models, while developing and supporting Amazon's IAM initiatives
• You'll be at the forefront of ensuring secure access across our complex global environment, helping to develop policies and procedures for identity lifecycle management, and providing valuable input on authentication and authorization designs
• Implementing SAST/DAST detections and applying security best practices to business units and applications
• Protecting and securing Amazon authentication and authorization workflows
• Participate in the analysis, troubleshooting, investigation and remediation of identity security related activities and events
• Implement and maintain automated security audits to ensure identity workflows adhere to industry standard security requirements
• Create and maintain scripts to automate the generation of reports across various technologies
• Collaborate with other Amazon Security Engineers to support cross-team programs and solutions
• Work with teams on technologies such as Windows Single-Sign-On, Kerberos, FIDO/FIDO2, Passwordless Authentication, AuthZ, AuthN and Auditing