Security Engineer, AWS Security Vulnerability Management

Job Description

Amazon is seeking a Security Engineer to join the AVM (AWS Vulnerability Management) organization to monitor intelligence, detect vulnerabilities, drive remediation response, and innovate to meet the scale and demand of all AWS customers.

Requirements

• BS degree in Computer Science, Computer Engineering, Information Systems or related degree; or 4+ years equivalent technology experience
• 3 years experience in system, network, and/or application security
• 3 years experience in threat modeling and interpreting vulnerability disclosures
• 2 years experience building automated tools in C, C++, Java, Python, Perl, PowerShell, or Ruby
• Strong understanding of Windows and Linux internals and system design

Responsibilities

• Research and interpret vulnerability disclosures and intelligence
• Own and coordinate vulnerability assessment and triage activities with subject-matter experts across AWS
• Own workstreams during large-scale remediation or triage campaigns
• Author risk assessment statements, remediation guidance, and status reports
• Partner with product teams across Amazon to develop scalable solutions to security vulnerabilities
• Develop tooling to automate and refine vulnerability management processes
• Periodic on-call responsibilities

Benefits

• Medical, dental, and vision coverage (multiple plan options)
• Health savings and flexible spending accounts
• 24/7 Employee Assistance Program for mental health support
• 401(k) with company match and various investment choices
• Company-paid life/AD&D and disability insurance
• Restricted stock units (RSUs) for employee ownership
• Child care and elder care referrals, adoption assistance
• Paid maternity and parental leave (including Ramp Back)
• Paid time off (PTO) and company holidays
• Employee discount on Amazon.com products
• Career Choice program (95% tuition and textbook coverage)