Sr. Security Engineer, Proactive Security

Responsibilities

• Conduct application security reviews, including architecture reviews, threat modeling, code reviews, and security testing.
• Perform mobile security reviews and investigate security issues across applications and services.
• Build security workflow automation and deliver security metrics and process improvements.
• Provide security training, guidance, documentation, and outreach to internal development teams.
• Conduct projects and research related to emerging security threats and technologies.
• Mentor junior engineers and serve as a security thought leader across AWS and Amazon.
• Assist with recruiting activities and administrative work.

Requirements

• 5+ years of experience in one or more areas including application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, or penetration testing.
• 5+ years of experience across the full secure software development lifecycle, including coding standards, code reviews, source control management, build processes, testing, and operations.
• 4+ years of non-internship experience with scripting, programming, and security code review in common programming languages.
• Knowledge of at least two of Scala, Java, Python, C, C++, or Go.
• Bachelor's degree in computer science or a related field.
• Experience identifying security issues and risks and developing mitigation plans.
• Non-internship industry experience identifying security vulnerabilities, attack patterns, and remediation techniques.
• Experience mentoring, serving as a tech lead, or leading an engineering team.
• Knowledge of networking protocols such as DNS, and TCP/IP.
• Preferred experience with threat modeling or other risk identification techniques, security in service-oriented architectures or microservices, web services, device technologies, firmware flashing, device debugging, device logs, security automation, or version control tools.

Benefits

• Comprehensive benefits including medical, dental, vision, prescription, life and AD&D insurance, employee assistance and mental health support, medical advice, flexible spending accounts, and adoption and surrogacy reimbursement.
• 401(k) matching, paid time off, and parental leave.
• Flexible work hours and arrangements.
• Ongoing knowledge-sharing, training, DEI learning experiences, and career-development resources.
• The compensation package may include sign-on payments and restricted stock units.