Security Engineer, Amazon

• Bachelor's degree in computer science or equivalent
• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, cryptography, system administration or network security experience

Desirable

• In this role you provide guidance to the Fire TV business and engineering teams on how to protect our customers and their data
• You'll participate in feature and product designs, review new and existing services, and help engineering teams mitigate the risks
• You'll also contribute to developing detection tools and promote security automation
• Your goal is to discover the risks early, when they're easier and cheaper to address, automating this discovery and mitigation whenever possible
• * Develop a relationship with the business teams to understand their products, the risks, and the mitigations that support their goals
• * Learn and teach the security policies, best practices and paved paths
• * Review application architectures. The environment will typically be a Linux-based OS running on AWS, though sometimes on a device
• * Develop threat models
• * Review security controls in code and cloud configurations
• * Assist teams with mitigations through documentation and proof of concept demonstrations in code and configurations
• * Assist in developing automated detection software for both pre-launch and post-launch risks
• * Assist in gathering metrics on the effectiveness of our security work
• You'll occasionally be on-call, routing some tickets to specialists while taking ownership of other issues raised by Alexa and Fire TV engineering, privacy, business and security teams
• Your solutions will build trust with our customer teams, diving deep and delivering practical mechanisms to reduce risk, finding the best solution for each unique business
• You'll regularly meet with the product engineering teams to learn about their work and to help them adopt security best practices