Application Security Engineer, Security Enablement for External Environments

Job Description

The Amazon Security Enablement for External Environments (SE3) team is seeking a Security Engineer to help build and grow security operations and tooling to address technical and programmatic security issues.

Requirements

• BS in Computer Science or related field, or equivalent work experience
• 3+ years of experience with at least two of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, penetration testing, cloud security, mobile security, and network security
• Experience reading and writing in at least one programming language

Responsibilities

• Conduct security reviews of internal usage of third-party (3P) vendor software
• Develop and implement tooling to automatically assess the secure configuration of third-party (3P) vendor software
• Provide security guidance documentation
• Work with engineering teams across Amazon to prioritize security issues identified during security review
• Provide expert advice and consultancy to internal customers on risk assessment, incident triage, threat modeling, and security vulnerability mitigation
• Implement information security controls and patterns that support risk assessments and the development of secure architectures
• Collaborate with engineering teams to drive product roadmaps, by providing security requirements that map security controls to service features
• Address bottlenecks, provide escalation management, anticipate and make tradeoffs, and balance the business needs versus technical constraints
• Partner with multiple teams across multiple locations with varying sets of priorities to ensure a timely delivery of the secure solutions
• Clarify and drive project commitments as well as establish and maintain clear chains of accountability
• Lead internal process improvement projects, including the development and implementation of internal security tools
• Provide security training and outreach to internal development teams
• Provide assistance with metrics delivery and improvements
• Provide assistance with recruiting activities and administrative work

Benefits

• Medical, dental, and vision coverage (multiple plan options)
• Health savings and flexible spending accounts
• 24/7 Employee Assistance Program for mental health support
• 401(k) with company match and various investment choices
• Company-paid life/AD&D and disability insurance
• Restricted stock units (RSUs) for employee ownership
• Child care and elder care referrals, adoption assistance
• Paid maternity and parental leave (including Ramp Back)
• Paid time off (PTO) and company holidays
• Employee discount on Amazon.com products
• Career Choice program (95% tuition and textbook coverage)