Security Engineer, Amazon

• Do you like working through abstract problems to implement creative solutions? Do you like to blend your day with both big and small issues?
• Experience in one or more of the following domains: access- control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
• Experience with at least one modern language such as Java, Python, C++, or C# including object-oriented design

Desirable

• In the Application Security Testing Automation and Insights team, our mission is to proactively secure application resources across all Amazon using deep research and scalable automation. We help our builder teams resolve issues before promoting code to production
• We seek to automate difficult to identify patterns, and work with teams to make remediation fast and accurate. Our team knows few boundaries and is willing to go to any length to solve big issues
• As a member of our team, you will bring your curiosity to learn and attention to detail to execute strategies and tactics that drive security and efficiency across all areas
• You will work in a collaborative team environment, and have opportunities to lead your own projects. You will define guidance and remediation for our vast engineering community to implement
• You will help raise the security bar across many of your favorite businesses. If you want to be apart of this fast paced, challenge driven team apply below. You will fearlessly drive Amazon’s security bar and high standards
• Develop, curate, and improve highly scalable application security rules to identify coding and configuration flaws
• Evaluate and recommend new security testing tools
• Deep dive code and research application frameworks to identify weaknesses and detection opportunities
• Leverage application system telemetry to extract insights and identify vulnerabilities
• Analyze and secure our applications during runtime
• Detect perimeter exposures
• Develop, enhance, and interpret security standards and guidance
• Demonstrate and promote security best practices, drive improvements of Amazon’s overall security architecture

• This position will remain posted until filled