Amazon

Returning Candidate?

Sr. Security Engineer

Sr. Security Engineer

Job ID 
414593
Location 
US-WA-Seattle
Posted Date 
1/12/2017
Company 
Amazon Digital Services LLC
Position Category 
Systems, Quality, & Security Engineering
Recruiting Team 
..

Job Description

Amazon Video is changing the way millions of customers interact with video content. The Amazon Video team delivers high-quality instant video to Amazon customers through subscriptions (Amazon Prime) as well as purchases and rentals. Amazon believes so deeply in the mission of Instant Video that we've launched our own studio to create original and exclusive content.

This is a great opportunity to join a small team and shape our group-wide security strategy going forward. If you are interested in the field of computer security and are passionate about designing systems that protect our customer data and earn their trust, this position will provide you with a challenging opportunity in an environment of rapid innovation. You will be responsible for diving deep into understanding our end-to-end service architecture, developing threat models for Amazon Video, identifying security vulnerabilities, prioritizing them with stakeholders and developing solutions to address the vulnerabilities. If you enjoy analyzing system services, operating systems, networks and applications from a security perspective, and you are skilled at discovering security issues that appear under evolving threat scenarios, this is a perfect job for you.
This is a hands-on role where you will own security reviews, risk analysis, vulnerability testing and implementing solutions jointly with Software engineers across the organization.

Responsibilities:
  • Identify security vulnerabilities in our services and develop mitigation solutions
  • Work effectively with teams across Amazon Video and Amazon InfoSec to deliver required security features
  • Develop security policies and procedures for the group
  • Develop and deliver training materials and perform general security awareness and specific security technology training
  • Evaluate and recommend new and emerging security products and technologies
  • Own and drive our security incident handling
  • Develop your role as a company expert in matters concerning security. This includes being participation at relevant security conferences as well as contributing to Amazon’s Intellectual Property through patents.
  • Help the team drive continual improvement and innovation in the group's vulnerability management process

Basic Qualifications

  • Bachelor’s Degree in Computer Science, Electrical and Computer Engineering or related field with 7+ years relevant work experience
  • Possess expert knowledge in computer security and threat modelling. In particular deep knowledge of cryptography, authentication protocols, authorization schemes and security engineering is a must.
  • Demonstrated passion for security with a customer focused approach, including successful delivery of a significant security product or feature
  • Deep expertise in network protocols (e.g. TCP/IP, UDP, IPSec, HTTPS, routing protocols)
  • 7+ years’ experience developing application and web services in Java, JavaScript, HTML and scripting skills (e.g., PERL, shell scripting)
  • Communicates clearly both verbally and in writing, within team and external groups.

Preferred Qualifications

  • Master’s Degree in Computer Science, Electrical and Computer Engineering or equivalent
  • Experience with Android and security regarding Android devices and the Operating System a plus.
  • CISSP, CISA, CISM and/or other security certifications preferred.