Amazon Prime Air is looking for a Security Engineer to focus on our applications, systems, and infrastructure security. If you are seeking an iterative fast-paced environment where you can drive innovation, apply state-of-the-art technologies to solve large-scale real world delivery challenges, and provide visible benefit to end-users, this is your opportunity.
You are obsessed with customer trust. You have breadth and depth of security knowledge and can identify and advise on security across multiple areas of an organization. You will work to help other teams create solutions while developing strong security culture and practices.
You have industry-leading technical abilities and are strong in multiple domains. You work with groups throughout Amazon Prime Air to help them integrate security at all levels of their projects. You are involved in hands-on security assessments, develop and provide guidance, and advocate security engineering best practices. You proactively and continually improve your level of knowledge about Amazon’s business, information security, and relevant technologies.
If this sounds like you....Come work on the Amazon Prime Air Information Security Team! We’re working on the future.
Key job responsibilities
- Work with data scientists, software development engineers, and other security engineers across multiple teams to develop innovative security solutions
- Create, update, and maintain threat models for a wide variety of software projects
- Conduct Manual and Automated Secure Code Reviews
- Identify security gaps in applications, services, or products both internally developed and third party solutions- Bachelor's Degree or MS in Computer Science/Engineering, Electrical Engineering, Information Security or related field, or equivalent work experience
- 2 years of experience in application, secure software or system design
- 2 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits
- Knowledge of Threat modeling and security risk analysis- Detailed technical knowledge in multiple areas of: security engineering, system and network security, authentication and security protocols, cryptography, and application security
- Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, BGP and other routing protocols)
- Strong scripting skills in one or more of the common languages (e.g., Perl, Python, Ruby, shell scripting)
- Experience with service-oriented architecture and web services security
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit
https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $125,500/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit
https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.
