Security Engineer, AWS Cloud Security Response

Amazon - Herndon, VA

Full-time

Herndon, VA

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The AWS Cloud Response Team is responsible for managing the security and availability of AWS Cloud services. This role operates on the ‘AWS' side of the Shared Responsibility Model, ensuring the security of the cloud and protecting customers. Engineers in this position will work tactically with both internal and external stakeholders to address security challenges at a massive scale, while also thinking strategically to develop and implement changes that drive automation, scalability, and continuous improvement within the organization. An ideal candidate will be able to assess technical versus business risks and consistently drive internal engineering teams to take appropriate actions to mitigate these risks in a timely manner. They should possess a good mix of broad and deep technical knowledge, along with a demonstrated background in information security. Technical proficiency in network and operating system security, cryptography, software security, security operations, incident response, and emergent security intelligence is essential. Additionally, candidates should have strong troubleshooting, technical, and communication skills, and the ability to manage a variety of tasks, including small projects and software development work. The role requires comfort in challenging and escalating issues to senior leadership to ensure the best outcomes for customers. A successful candidate will need to triage new incoming issues to determine their risk level to AWS and prioritize remediation efforts in conjunction with the impacted service team. They will also communicate the status of these issues to various audiences, both technical and non-technical, at different levels of seniority, including AWS' Chief Information Security Officer. Participation in promoting security throughout the company and building good working relationships within the team and across Amazon is also a key responsibility. The position supports AWS with security operations and incident response activities, coordinating and facilitating security response activities for all AWS products and services, and driving security-related issues to resolution across numerous service teams.

Responsibilities

• Triage new incoming issues to determine the level of risk they present to AWS and prioritize remediation accordingly.
• Communicate the state of security issues to various audiences, both technical and non-technical, at various levels of seniority.
• Participate in efforts to promote security throughout the company and build good working relationships within the team and with others across Amazon.
• Demonstrate high capacity and tolerance for extreme context switching and interruptions while remaining productive and effective.
• Escalate issues to senior AWS leadership if they are not progressing at the correct pace based on impact.
• Explore building and improving tooling to enhance efficiency and share benefits with all engineers globally.
• Assist with recruiting activities and administrative work.
• Fulfill regular on-call responsibilities.

Requirements

• 2+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object-oriented languages.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• 4+ years of experience in threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security.

Nice-to-haves

• Experience with AWS products and services.
• Bachelor's degree in computer science or equivalent.

Benefits

• Flexible work hours and arrangements to support work-life balance.
• Endless knowledge-sharing and training resources for career advancement.