Global Services Security is looking for an Security Engineer to help validate that our customer-facing staff and hired consulting partners deliver services to the highest security standards. You will help validate that our services, applications, and websites are designed and implemented to the highest security standards. You will build and automate security mechanisms that help us monitor and inspect the activities and deliverables created when we work hand-in-hand with our customers. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our services.
A Security Engineer at AWS is expected to be strong in multiple domains and provide significant contributions to the teams within AWS Global Services, Security and to multiple groups throughout Amazon. Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. You are also expected to mentor more junior engineers and be a security thought leader for the organization.
A Security Engineer must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the security team's work and constantly seek opportunities for process improvement. They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AWS IT Security and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas.
You will have the combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work. This role will provide career growth opportunities as you gain new security skills in the course of your duties.
Key job responsibilities
- Application security reviews
- Secure architecture design
- Threat modeling
- Security assessments
- Security tool automation and development
- Projects and research work as needed
- Security training and outreach to internal development teams
- Security guidance documentation
- Security metrics delivery and improvements
- Assistance with recruiting activities
A day in the life
You will build automation to improve operational efficiency and gather new insights from data. You will identify and prioritize opportunities to automate mechanisms across a diverse landscape of business tools, systems, and architectures. You will collaborate with teams to build and improve security mechanisms, conduct security reviews, and inspect security plans to reduce time to launch or delivery. You will support application security reviews, including secure architecture designs and threat models. You will contribute to security training, best practices, and policies for internal teams. You will implement scalable solutions to facilitate regular audits of security controls, guidance, and compliance standards.
About the team
The Global Services Security (GSS) team, a part of Amazon Web Services (AWS), leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world’s workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.- Bachelor's degree in computer science or equivalent
- Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language
- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent- Experience with AWS products and services
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP
- You demonstrate excellent judgement in assessing and prioritizing technical risk.
- You have a strong application security background with a focus on scalable solutions
- You have experience with Security Engineering (building tools) and Assurance methodologies e.g. fuzzing, static and dynamic code analysis
Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (
https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit
https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
