Security Engineer, Amazon
Stores Application Security
The largest online retailer and technology provider
Open for applications
The largest online retailer and technology provider
1001+ employees
Open for applications
1001+ employees
Company mission
To be Earth's most customer-centric company.
Role
Who you are
- The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly
- Technically, this person will be a security generalist with one or more areas of deep expertise. In their communication, they will clearly articulate risks to technical and non-technical audiences alike
- Interpersonally, successful candidates will effectively harmonize disparate opinions while effectively prioritizing risks to guide their partners towards secure solutions
- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language
- Bachelor's degree in computer science or equivalent, or 3+ years of engineering experience
Desirable
- Experience applying threat modeling or other risk identification techniques or equivalent
- CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+
What the job involves
- As an AppSec engineer, you will collaborate with software development teams to ensure we keep our customers safe while developing these novel services
- In a given day, you might be inspecting an application’s code for security issues, building a new framework to help our software developers build faster and more securely, or fine-tuning the design for a new service alongside its software developers
- * Creating, updating, and maintaining threat models for a wide variety of software projects
- * Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
- * Development of security automation tools
- * Adversarial security analysis using modern tools to augment manual effort
- * Security training and outreach for internal development teams
- * Security architecture and design guidance
- * Independently solve security problems that require novel methods or approaches
- * Influence your team’s and partners’ process, priorities, and choices to improve outcomes
Our take
Amazon is the world's largest online retailer, and is well-known for its disruption of well-established industries. The company is present in numerous verticals, including cloud computing with Amazon Web Services, AI with its range of Alexa devices and a global marketplace more commonly referred to as 'the everything store'. Acquisitions include Ring, Twitch, Whole Foods Market, and IMDb.
More recently, Amazon has been focused on leading the "third wave in digital advertising". Many businesses are now shifting ad dollars to retailers, which before would have been spent with online media platforms. Amazon's seen great success in the space, with its revenue from advertising now higher than its Amazon Prime membership scheme, audiobooks and digital music combined. This growth is particularly impressive considering its digital ad rivals (like Snap, Alphabet, and Meta) have suffered declines due to wider macroeconomic factors and Apple's iOS privacy changes.
Despite its dominant market position, Amazon will continue to be challenged over the next decade, including sustaining AWS's cloud dominance in the face of Google and Microsoft. On top of this, the company's e-commerce division is facing profitability problems despite its 2023 post-IPO debt funding of 8 billion. It will need to find new ways to stay above their competitors.
Steph
Company Specialist at Welcome to the Jungle
Insights
16% employee growth in 12 months
Company
Company HQ
South Lake Union, Seattle, WA
Leadership
Jeff Bezos
(Founder & Executive Chairman)Jeff is an American business magnate, media proprietor, and investor. As well as founding Amazon, Jeff founded Blue Origin, an aerospace manufacturer and sub-orbital spaceflight services company and also owns The Washington Post.
Andy Jassy
(President & CEO)Joined Amazon as a Marketing Manager in 1997. Developed AWS with Jeff Bezos, and became CEO of Amazon in 2021.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 178 more jobs at Amazon