Application Security Engineer, Security Enablement for External Environments

Job Description

The Amazon Security Enablement for External Environments (SE3) team is looking for a Security Engineer to help build and grow security operations and tooling to address technical and programmatic security issues, as well as emerging threats. The role involves collaborating with business stakeholders, conducting security reviews, and providing expert advice on risk assessment and incident triage.

Requirements

• BS in Computer Science or related field, or equivalent work experience
• 3+ years of experience with at least two of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, penetration testing, cloud security, mobile security, and network security
• Experience reading and writing in at least one programming language

Responsibilities

• Conduct security reviews of internal usage of third-party (3P) vendor software
• Develop and implement tooling to automatically assess the secure configuration of third-party (3P) vendor software
• Provide security guidance documentation
• Work with engineering teams across Amazon to prioritize security issues identified during security review
• Provide expert advice and consultancy to internal customers on risk assessment, incident triage, threat modeling, and security vulnerability mitigation
• Implement information security controls and patterns that support risk assessments and the development of secure architectures
• Collaborate with engineering teams to drive product roadmaps by providing security requirements that map security controls to service features
• Address bottlenecks, provide escalation management, anticipate and make tradeoffs, and balance business needs versus technical constraints
• Partner with multiple teams across multiple locations with varying sets of priorities to ensure a timely delivery of secure solutions
• Lead internal process improvement projects, including the development and implementation of internal security tools
• Provide security training and outreach to internal development teams
• Provide assistance with metrics delivery and improvements
• Provide assistance with recruiting activities and administrative work

Benefits

• Medical, dental, and vision coverage (multiple plan options)
• Health savings and flexible spending accounts
• 24/7 Employee Assistance Program for mental health support
• 401(k) with company match and various investment choices
• Company-paid life/AD&D and disability insurance
• Restricted stock units (RSUs) for employee ownership
• Child care and elder care referrals, adoption assistance
• Paid maternity and parental leave (including Ramp Back)
• Paid time off (PTO) and company holidays
• Employee discount on Amazon.com products
• Career Choice program (95% tuition and textbook coverage)