The Job

Sr. Security Engineer, Stores Application Security

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · Mjukvaruutveckling

Gå med för uppdateringar

I korthet

Amazon Stores seeks a Sr. Security Engineer to collaborate with development teams, ensuring customer safety in novel service development. The role involves inspecting application code for security issues, building secure frameworks, and providing security architecture guidance. Ideal candidates have deep technical expertise and strong communication skills to articulate risks and influence partners towards secure solutions.

Ansvarsområden

  • Creating, updating, and maintaining threat models for a wide variety of software projects
  • Security architecture and design guidance
  • Manual and Automated Secure Code Review, primarily in Java, Python and Javascript
  • Development of security automation tools
  • First party application security research
  • Adversarial security analysis using innovative tools to augment manual effort
  • Security training and outreach for internal development teams
  • Independently solve security problems that require novel methods or approaches
  • Influence your team’s and partners’ process, priorities, and choices to improve outcomes

Krav

  • 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
  • Experience working in identifying security issues and risks, and developing mitigation plans
  • Experience as a mentor, tech lead or leading an engineering team
  • BS in Computer Science, Information Security, 5+ years of demonstrated experience in areas such as application security, offensive security and/or systems security and have a strong application security background with a focus on scalable solutions
  • Solid understanding of threat modeling, design and architecture review, manual source code review, security vulnerabilities, attacker exploit techniques, and methods for their remediation
  • Excellent understanding of network architecture, enterprise IT systems and cloud such as AWS
  • Programming/Scripting skills (E.g: Java, Python, Perl, Bash, Ruby, PowerShell, etc.)
  • Excellent written and verbal communication skills
  • Strong problem-solving ability
  • Ability to work in ambiguous and constantly evolving environment
  • Can identify and remove bottlenecks for your teammates, both in process and technology
  • Collaborate with security stakeholders to develop security strategies
  • Can explain complex technical risks in simple, clear language that non-technical stakeholders can easily understand and act upon.

Önskade kvalifikationer

  • Experience applying threat modeling or other risk identification techniques or equivalent
  • Experience with security in service-oriented architectures/microservices and web services
  • Proven ability to drive continuous, scalable improvements in security controls and practices, and to collaborate effectively with stakeholders to develop and implement security strategies.
  • Demonstrated strong judgment in assessing and prioritizing technical risk, with a solid application security background and a focus on scalable solutions.
  • Proven experience designing, building, and securing complex AWS architectures.
  • Excellent written and verbal communication skills, with the ability to convey complex technical concepts effectively.
  • Proactive in identifying and eliminating bottlenecks across processes and technology to enhance team productivity.
  • Experience in one or more of the following areas: threat modeling, secure coding, identity and access management (IAM), authentication, software development, cryptography, or security research.
  • Strong expertise in AWS services, network architecture, and enterprise IT environments.
  • Hands-on experience performing security activities across one or more phases of the Software Development Lifecycle (SDLC), including security design reviews, threat modeling, secure code reviews, and security testing.

Förmåner

  • Investing in work-life harmony
  • Dedicated resources that consistently innovate in reducing on-call time
  • Ensuring the team spend their time on the highest-value tasks
  • Flexible schedule
  • Mentorship and Career growth
  • Endless knowledge-sharing, training, and other career-advancing resources
#security#application security#threat modeling#secure code review#AWS#Java#Python#Javascript#security automation
Amazon Logo

Företag

Amazon

Publicerade jobb

för 1 månad sedan

Anställningstyp

Heltid

Arbetsform

På plats

Erfarenhetsnivå

Senior

Platser

Bengaluru, India

Kvalifikation

Kandidatexamen

Sökande

Ansök tidigt