Security Engineer, AppSec Testing Automation and Insights

Job Description

Join Amazon's Application Security Testing Automation and Insights team to proactively secure application resources across all Amazon using deep research and scalable automation.

Requirements

• Experience in access-control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
• Experience with at least one modern language such as Java, Python, C++, or C# including object-oriented design

Responsibilities

• Develop, curate, and improve highly scalable application security rules to identify coding and configuration flaws
• Evaluate and recommend new security testing tools
• Deep dive code and research application frameworks to identify weaknesses and detection opportunities
• Leverage application system telemetry to extract insights and identify vulnerabilities
• Analyze and secure applications during runtime
• Detect perimeter exposures
• Develop, enhance, and interpret security standards and guidance
• Demonstrate and promote security best practices, drive improvements of Amazon’s overall security architecture

Benefits

• Medical, dental, and vision coverage (multiple plan options)
• Health savings and flexible spending accounts
• 24/7 Employee Assistance Program for mental health support
• 401(k) with company match and various investment choices
• Company-paid life/AD&D and disability insurance
• Restricted stock units (RSUs) for employee ownership
• Child care and elder care referrals, adoption assistance
• Paid maternity and parental leave (including Ramp Back)
• Paid time off (PTO) and company holidays
• Employee discount on Amazon.com products
• Career Choice program (95% tuition and textbook coverage)