Security Engineer, Amazon
Specialized Business Services Security, Vulnerability Management
$136-212.8k
The largest online retailer and technology provider
Be an early applicant
The largest online retailer and technology provider
1001+ employees
Be an early applicant
$136-212.8k
1001+ employees
Company mission
Amazon aims to be Earth’s most customer centric company. Their mission is to continually raise the bar of the customer experience by using the internet and technology to help consumers find, discover and buy anything, and empower businesses and content creators to maximise their success.
Role
Who you are
- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Bachelor's degree in computer science or equivalent
- 3+ years hands-on experience in Vulnerability Management, Product Security and/or Application Security
Desirable
- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience with AWS products and services
- Knowledge of common software security vulnerabilities (memory corruption, privilege escalation, web application exploitation, protocol-based weaknesses, etc.) and analyzing their impact
- Working experience with vulnerability detection tools such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) and Open Source Composition Analysis (SCA)
- Experience with scripting (Python bash, etc.)
What the job involves
- Amazon’s Specialized Business Services Security team is seeking an innovative Security Engineer to join our Vulnerability Management Team
- In this position, you will focus on detection, assessment, triage and supporting remediation of vulnerabilities
- You will work with a diverse set of security scanning tools to support our application security vulnerability detection capabilities
- Your goal will be to deeply understand Amazon’s innovative Devices and Services to enhance our vulnerability detection capabilities throughout the Software Development Lifecycle (SDLC)
- You will partner with development teams to drive prioritization and remediation of vulnerabilities to help deliver secure products for our customers
- Developing and tuning custom, open source and third-party high quality automated detection tools (e.g. static analyzers, fuzzers, scanners, etc.) to perform variety of security vulnerability analysis (SAST, DAST, SCA, etc.)
- Reviewing output of automated detection tools for accuracy
- Analyzing public and private vulnerability disclosures to analyze impact on Amazon Devices and Services
- Providing actionable long-term risk prioritization and mitigation guidance to drive security improvements at scale
- Proposing mechanisms for integrating security detection tools into the development lifecycle
- Collaborate with partners across Amazon to develop scalable solutions to security problems
- At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services
Our take
Amazon is the world's largest online retailer, and is well-known for its disruption of well-established industries. The company is present in numerous verticals, including cloud computing with Amazon Web Services, AI with its range of Alexa devices and a global marketplace more commonly referred to as 'the everything store'. Acquisitions include Ring, Twitch, Whole Foods Market, and IMDb.
More recently, Amazon has been focused on leading the "third wave in digital advertising". Many businesses are now shifting ad dollars to retailers, which before would have been spent with online media platforms. Amazon's seen great success in the space, with its revenue from advertising now higher than its Amazon Prime membership scheme, audiobooks and digital music combined. This growth is particularly impressive considering its digital ad rivals (like Snap, Alphabet, and Meta) have suffered declines due to wider macroeconomic factors and Apple's iOS privacy changes.
Despite its dominant market position, Amazon will continue to be challenged over the next decade, including sustaining AWS's cloud dominance in the face of Google and Microsoft. On top of this, the company's e-commerce division is facing profitability problems despite its 2023 post-IPO debt funding of 8 billion. It will need to find new ways to stay above their competitors.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Employees have opportunities to own Amazon stock, participate in 401(k) plans with company match, and enroll in paid life and accident insurance
- Financial counseling and estate planning services are also available, plus paid short-term and long-term disability if needed
- Medical, dental, and vision coverage to all our regular full-time employees, regardless of their level, tenure, or position
- Amazon employees have free access to a network of more than 2 million caregivers, including nannies, babysitters and special-needs caretakers
- Employees receive discounts on certain day care centers, and Amazon provides a variety of free resources for parents of children with autism, ADHD and developmental disabilities
- Adoption assistance for qualified domestic and international adoption expenses including attorney fees, court costs, and travel
- Leave Share program allows employees to give six weeks of paid parental leave to a spouse or partner who isn’t eligible for parental leave from their employer
- Amazon Care's virtual services are available in all 50 states, and in-person care is active in Seattle, Washington, D.C., Arlington, Baltimore, Boston, Dallas, Austin, and Los Angeles, with 20+ more markets coming online in 2022 alone
- 20 weeks of paid leave to birthing mothers and six weeks for parents who adopt
Company values
- Customer obsession rather than competitor focus
- Passion for invention
- Commitment to operational excellence
- Long-term thinking
Company HQ
South Lake Union, Seattle, WA
Articles
Leadership
Jeff Bezos
(Founder & Executive Chairman)Jeff is an American business magnate, media proprietor, and investor. As well as founding Amazon, Jeff founded Blue Origin, an aerospace manufacturer and sub-orbital spaceflight services company and also owns The Washington Post.
Andy Jassy
(President & CEO)Joined Amazon as a Marketing Manager in 1997. Developed AWS with Jeff Bezos, and became CEO of Amazon in 2021.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 371 more jobs at Amazon