Senior Security Engineer, Amazon

• BS in Computer Science, Information Security or equivalent
• Minimum of 5 years of experience with any combination of the following: mobile security, threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security
• Knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, or application security
• An understanding of network and web related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
• Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)

Desirable

• The Amazon Web Services (AWS) Proactive Security team continuously works to ensure our services and resources are implemented and maintained to the meet the highest standards of security
• Our mission is to prevent security incidences from happening and when they do, we detect and mitigate them in real time
• We develop tools and prototypes to automatically detect and prevent security problems in AWS source code, services and resources
• You will use your security expertise to define new tooling domains and building new security focused products within AWS Security
• You will collaborate with Builders, Security Analysts and Applied Scientists to drive security improvements
• You will communicate risks across the business to both technical and non-technical audiences, and effectively harmonize disparate opinions while reducing risk
• Research, identify, and prioritize security problems that can be detected using automation
• Effectively drive conversations with Principal Engineers, Directors and VPs to influence business investments and prioritize risks
• Develop detection prototypes for these security problems to enhance our tool-set for static, dynamic or network analysis. Provide security architecture and design guidance and develop security automation tools
• Work with Builders and service teams to address detected security issues in an appropriate and timely fashion
• Identify opportunities to prevent security issues at scale
• Document and provide security guidance that will be used across AWS services
• Deliver metrics to show effectiveness of our security initiatives
• Mentor and develop teammates both technically and professionally
• Seek out, develop, and advocate for new technology to research, identify, and mitigate complex risks
• Effectively navigate novel situations and problems that do not have a defined solution