Application Security Engineer, Amazon

• BS in Computer Science or related field, or equivalent work experience
• Minimum of 2+ years of experience with security engineering (architecture reviews, threat modeling, secure coding etc.), system and network security, authentication and security protocols, cryptography or application security
• Familiarity with common attack patterns and exploitation techniques for web & mobile applications and IoT devices
• Knowledge of commonly found software security vulnerabilities (like OWASP top 10) and remediation techniques
• Knowledge of basic networking and network security related concepts (TCP/UDP, Firewalls/Switches, Wi-Fi security, TLS, etc.)

Desirable

• AWS Security is on the cutting edge of many security issues for a wide variety of platforms and technologies including cloud services, Internet of things (IoT), identity and access management, mobile devices, virtualization and custom hardware, all operating at massive scale
• Similarly, our highly collaborative team is committed to each team member’s growth as our business grows
• AWS Security is looking for an Application Security Engineer to help validate that our services, applications, and websites are designed and implemented to the highest security standards
• You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios
• You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge services
• An Application Security Engineer at Amazon is expected to be strong in multiple domains and provide significant contributions to the AWS IT Security team and to multiple groups throughout Amazon
• Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices
• You are also expected to mentor more junior engineers and be a security thought leader for the organization
• An Application Security Engineer must foster constructive dialogue and seek resolution when confronted with discordant views
• Engineers in this role are expected to participate fully in the planning of the AWS Security team's work and constantly seek opportunities for process improvement
• They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AWS Security and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas
• Application security reviews (includes architecture reviews, threat modeling, code reviews and security testing)
• Mobile security reviews
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance and documentation
• Security workflow automation
• Security metrics delivery and process improvements
• Assistance with recruiting activities and administrative work