Sr. Security Engineer, AppSec

Responsibilities

• Create, update, and maintain threat models for diverse software projects.
• Perform manual and automated secure code reviews, primarily in Java, Python, and JavaScript.
• Develop security automation tools and use adversarial security analysis techniques.
• Provide security architecture and design guidance to software development teams.
• Deliver security training and outreach for internal development teams.
• Independently solve novel security problems and influence partner priorities, processes, and technical decisions.

Requirements

• At least 4 years of non-internship experience troubleshooting system issues, analyzing logs, or automating complex tasks with command-line tools.
• At least 5 years of experience identifying security issues and risks and developing mitigation plans.
• At least 4 years of non-internship scripting, programming, and security code review experience.
• Knowledge of at least two of Scala, Java, Python, C, C++, or Go.
• Experience identifying industry security vulnerabilities, attack patterns, and remediation techniques.
• Experience in at least one security domain, such as access control, network security, application or system development security, security architecture and models, cryptography, or operations security.
• At least 8 years of application security or development experience.
• Preferred experience with service-oriented architectures, microservices, and web services.
• Preferred certification includes CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, or PenTest+.

Benefits

• Amazon offers comprehensive medical, dental, vision, prescription, life, AD&D, employee assistance, mental health, medical advice line, flexible spending, adoption and surrogacy reimbursement, 401(k) matching, paid time off, and parental leave benefits.
• The organization provides work-life flexibility and resources intended to reduce on-call time.
• Employees receive knowledge sharing, ongoing training, and career-advancement resources.
• Amazon promotes inclusive team culture and diversity, equity, and inclusion learning experiences.