Senior Security Engineer, Maximum Application Security Team (MAST)

Amazon - Austin, TX

Full-time - Senior

Austin, TX

Sporting Goods, Hobby, Musical Instrument, Book, and Miscellaneous Retailers

About the position

The Senior Security Engineer in the Maximum Application Security Team (MAST) at Amazon is responsible for ensuring the security of various software projects by collaborating with development teams. This role involves inspecting code for security issues, developing frameworks for secure software development, and providing security architecture guidance. The ideal candidate will possess a blend of technical expertise and strong communication skills to articulate risks and guide teams towards secure solutions while promoting a culture of work-life harmony.

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Conducting manual and automated secure code reviews, primarily in Java, Python, and JavaScript
• Developing security automation tools
• Performing adversarial security analysis using cutting-edge tools
• Providing security training and outreach for internal development teams
• Offering security architecture and design guidance
• Leading execution and definition of security strategy for the team
• Mentoring and developing teammates both technically and professionally
• Seeking out, developing, and advocating for new technology to identify and mitigate complex risks
• Effectively navigating novel situations and problems that do not have a defined solution

Requirements

• Bachelor's degree or relevant security certifications (CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, PenTest)
• Minimum of 5 years of experience in security-related fields
• Advanced understanding of security engineering, system and network security, authentication and security protocols, cryptography, or application security
• Experience reading and writing in at least one programming language

Nice-to-haves

• Excellent judgement in assessing and prioritizing technical risk
• Strong application security background with a focus on scalable solutions
• Experience negotiating priorities across teams to achieve challenging goals
• Experience creating processes that drive consistent security outcomes

Benefits

• Work-life harmony
• Continuous knowledge-sharing and training opportunities
• Career advancement resources
• Diversity and inclusion initiatives