Amazon
Senior Security Engineer, US ADC Security INFOSEC
Amazon, Columbia, Maryland, United States, 21046
Description
The U.S. Amazon Dedicated Cloud Information Security team is looking for an experienced Senior Security Engineer with a strong control testing, investigation, and development background. You will lead security reviews, facilitate code reviews, and build/enhance cloud architectures that support security programs. This may include writing code/scripts and creating detection mechanisms.
As a Senior Security Engineer you will be expected to influence the business and technology direction of the team. You will have the ability to impact the goals of not only your direct team but partner teams and stakeholders as well. You will be counted on to define and apply the standards for engineering, test, and operational excellence best practices for your team.
This is a hands-on position where your daily activities will range from facilitating logistics for security reviews, performing threat modeling, configuring software and hardware test environments, guiding/monitoring internal and external test personnel, addressing complex technical questions around cryptography, access, and threats/mitigations. To succeed in this role, you will deliver on-time results that delight your customers while inspiring your team to think big about their work.
Key job responsibilities
Providing security engineering solutions and support during customer-facing engagements, proactively addressing customer needs while reducing risks.
Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. Instilling a culture that drives DevOps, holding a high quality bar with code reviews, driving automation efforts to empower, and removing barriers for your team.
Translating complex functional and technical requirements into detailed architecture and design.
This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph.
Basic Qualifications
5+ years experience in system, network, and/or application security.
5+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, Rust, Ruby experience.
5+ years of non-internship professional software development experience.
Experience leading the design, build, and deployment of complex and performant (reliable and scalable) software solutions in production.
Bachelor's degree in engineering or computer science, or equivalent work experience.
Current, active US Government Security Clearance of TS/SCI with Polygraph
Preferred Qualifications
Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences.
Deep understanding of software development and deployment practices - feature branch management strategies, continuous integration, continuous delivery, software observability, and metering.
Experience with secure application development - static application security testing, dynamic application security testing, vulnerability scanning and mitigation.
Experience with AWS services.
Experience in vulnerability management or security operations.
Familiarity with system interfaces: gRPC, REST, SQL.
Familiarity with database replication.
Understanding of High Availability, Disaster Recovery, and Failover.
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.
The U.S. Amazon Dedicated Cloud Information Security team is looking for an experienced Senior Security Engineer with a strong control testing, investigation, and development background. You will lead security reviews, facilitate code reviews, and build/enhance cloud architectures that support security programs. This may include writing code/scripts and creating detection mechanisms.
As a Senior Security Engineer you will be expected to influence the business and technology direction of the team. You will have the ability to impact the goals of not only your direct team but partner teams and stakeholders as well. You will be counted on to define and apply the standards for engineering, test, and operational excellence best practices for your team.
This is a hands-on position where your daily activities will range from facilitating logistics for security reviews, performing threat modeling, configuring software and hardware test environments, guiding/monitoring internal and external test personnel, addressing complex technical questions around cryptography, access, and threats/mitigations. To succeed in this role, you will deliver on-time results that delight your customers while inspiring your team to think big about their work.
Key job responsibilities
Providing security engineering solutions and support during customer-facing engagements, proactively addressing customer needs while reducing risks.
Working alongside and mentoring Information Security engineers to improve security, reduce and quickly address risk. Instilling a culture that drives DevOps, holding a high quality bar with code reviews, driving automation efforts to empower, and removing barriers for your team.
Translating complex functional and technical requirements into detailed architecture and design.
This position requires that the candidate selected be a US Citizen and must currently possess and maintain an active TS/SCI security clearance with polygraph.
Basic Qualifications
5+ years experience in system, network, and/or application security.
5+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, Rust, Ruby experience.
5+ years of non-internship professional software development experience.
Experience leading the design, build, and deployment of complex and performant (reliable and scalable) software solutions in production.
Bachelor's degree in engineering or computer science, or equivalent work experience.
Current, active US Government Security Clearance of TS/SCI with Polygraph
Preferred Qualifications
Excellent written and verbal communication skills with the ability to adapt messaging to executive, technical, and non-technical audiences.
Deep understanding of software development and deployment practices - feature branch management strategies, continuous integration, continuous delivery, software observability, and metering.
Experience with secure application development - static application security testing, dynamic application security testing, vulnerability scanning and mitigation.
Experience with AWS services.
Experience in vulnerability management or security operations.
Familiarity with system interfaces: gRPC, REST, SQL.
Familiarity with database replication.
Understanding of High Availability, Disaster Recovery, and Failover.
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.