Senior Security Engineer, AWS Proactive Security

1 month ago


Washington, United States Amazon Full time
Senior Security Engineer, AWS Proactive Security

Job ID: 2721293 | Amazon Development Center U.S., Inc.

The Amazon Web Services (AWS) Proactive Security team continuously works to ensure our services and resources are implemented and maintained to meet the highest standards of security. Our mission is to prevent security incidents from happening and when they do, we detect and mitigate them in real time.

We are looking for a Senior Security Engineer who has a strong passion for security-at-scale. We develop tools and prototypes to automatically detect and prevent security problems in AWS source code, services, and resources. Our team deals with immense quantities of resources and we use cutting-edge analysis techniques to solve the most complex security issues at scale.

You will use your security expertise to define new tooling domains and build new security-focused products within AWS Security. You will collaborate with Builders, Security Analysts, and Applied Scientists to drive security improvements. The ideal candidate combines technical acumen with an ability to lead by influence and communicate clearly. Technically, you will be a security generalist with one or more areas of deep expertise. You will communicate risks across the business to both technical and non-technical audiences, and effectively harmonize disparate opinions while reducing risk.

Key job responsibilities
  1. Research, identify, and prioritize security problems that can be detected using automation.
  2. Effectively drive conversations with Principal Engineers, Directors, and VPs to influence business investments and prioritize risks.
  3. Develop detection prototypes for these security problems to enhance our tool-set for static, dynamic, or network analysis. Provide security architecture and design guidance and develop security automation tools.
  4. Work with Builders and service teams to address detected security issues in an appropriate and timely fashion.
  5. Identify opportunities to prevent security issues at scale.
  6. Document and provide security guidance that will be used across AWS services.
  7. Deliver metrics to show the effectiveness of our security initiatives.
  8. Mentor and develop teammates both technically and professionally.
  9. Seek out, develop, and advocate for new technology to research, identify, and mitigate complex risks.
  10. Effectively navigate novel situations and problems that do not have a defined solution.
BASIC QUALIFICATIONS

- BS in Computer Science, Information Security, or equivalent
- Minimum of 5 years of experience with any combination of the following: mobile security, threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
- Knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, or application security
- An understanding of network and web-related protocols (such as, TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
- Experience with multiple programming languages (such as, Java, C++, Ruby, Python, Perl, etc.)

PREFERRED QUALIFICATIONS

- Experience managing and delivering security solutions at scale
- Demonstrated experience collaborating with other security engineers and developers to deliver complex projects
- Experience with AWS or similar enterprise cloud computing platforms
- Knowledge of Linux systems and operating system internals
- Excellent written and verbal communication skills with the ability to convey technical information to a wide variety of audiences; and strong and creative problem-solving abilities
- Strong sense of ownership, urgency, and drive

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

#J-18808-Ljbffr

  • Washington, United States Amazon Full time

    Senior Security Engineer , AWS Offensive SecurityJob ID: 2831178 | Amazon Development Center U.S., Inc.Do you enjoy finding unique security issues? Do you enjoy protecting customers at scale? Do you like challenging assumptions? On the AWS Offensive Security team, you will help ensure our devices, applications, services, and systems are designed and...


  • Washington, United States Iron Vine Security Full time

    Job Requirements: · Strong written and verbal communication skills. · Experience designing, implementing, and maintaining IT security systems to protect digital assets from malicious cyber-attacks. · Experience developing and implementing an annual Incident Response Training and Testing Program · Experience implementing, configuring, and...


  • Washington, United States Amazon Full time

    Job DescriptionWe are looking for a Senior Security Engineer who has a strong passion for security-at-scale.The Amazon Web Services (AWS) Proactive Security team continuously works to ensure our services and resources are implemented and maintained to meet the highest standards of security.Key Responsibilities:Research and Prioritize Security Problems:...


  • Washington, United States Bank of America Full time

    Senior Security Engineer Location: Denver, Colorado; Washington, District of Columbia; Chicago, Illinois Job Description: The Senior Security Engineer is responsible for leading multiple security engineering efforts that deliver enterprise security capabilities. This will include serving as a subject matter expert of security technology and acting as the...


  • Washington, United States Bank of America Full time

    Senior Security EngineerLocation: Denver, Colorado; Washington, District of Columbia; Chicago, IllinoisJob Description:The Senior Security Engineer is responsible for leading multiple security engineering efforts that deliver enterprise security capabilities. This will include serving as a subject matter expert of security technology and acting as the...


  • Washington, United States Cannon Security Products Full time

    About the job The Integrity, Investigations, Intelligence and Events (i3E) teams at Meta are dedicated to protecting the users of our family of applications (e.g. Facebook, Instagram, WhatsApp, Oculus) from a multitude of threats including criminal organizations, human trafficking and exploitation, and scams/fraud. We are seeking security engineers to...


  • Washington, United States GuidePoint Security, LLC Full time

    GuidePoint Security provides trusted cybersecurity expertise, solutions, and services that help organizations make better decisions and minimize risk. By taking a three-tiered, holistic approach for evaluating security posture and ecosystems, GuidePoint enables some of the nation's top organizations, such as Fortune 500 companies and U.S. government...


  • Washington, United States ManTech Full time

    Become an integral part of a diverse team while working at an Industry Leading Organization, where our employees come first. At ManTech International Corporation, you’ll help protect our national security while working on innovative projects that offer opportunities for advancement. Currently, ManTech is seeking a motivated, career and customer-oriented...


  • Washington, United States Ampcus Full time

    Ampcus - Senior Software Engineer (AWS)We are looking for an experienced Senior Software Engineer (AWS) to join our team at Ampcus. As a key member of our engineering team, you will be responsible for designing, developing, and deploying cloud-based software applications using AWS technologies.Key Responsibilities:Design and develop scalable and secure...


  • Washington, Washington, D.C., United States T-Rex Solutions Full time

    About the RoleT-Rex Solutions is seeking a highly skilled Senior Cloud Security Engineer to join our team. This individual will play a critical role in designing, implementing, and managing secure cloud architectures on platforms such as AWS, Azure, and Google Cloud Platform.Key Responsibilities:Design and implement secure cloud architectures to protect...


  • Washington, United States ManTech Full time

    Become an integral part of a diverse team while working at an Industry Leading Organization, where our employees come first. At ManTech International Corporation, you’ll help protect our national security while working on innovative projects that offer opportunities for advancement.Currently, ManTech is seeking a motivated, career and customer-oriented...


  • Washington, United States ManTech Full time

    Become an integral part of a diverse team while working at an Industry Leading Organization, where our employees come first. At ManTech International Corporation, you’ll help protect our national security while working on innovative projects that offer opportunities for advancement. Currently, ManTech is seeking a motivated, career and customer-oriented...


  • Washington, United States T-Rex Solutions Full time

    Job DescriptionJob DescriptionT-Rex Solutions is looking to select a Senior Cloud Security Engineer to play a critical role in the management, enhancement, and security of our Department of Treasury TCloud environments. Your deep knowledge in system administration, security administration, and scripting, combined with your proficiency in cloud platforms and...


  • Washington, United States Global Solutions Consulting LLC. Full time

    About the RoleGSC is a leading cyber security and information technology company based in Washington, DC. We are seeking a highly skilled and experienced Senior Cloud Security Engineer to join our team. In this role, you will lead the design, implementation, and maintenance of our cloud security infrastructure, ensuring the protection of our systems,...


  • Washington, United States Serigor Inc Full time

    Job Overview:Serigor Inc is seeking an experienced AWS Security Architect Lead to lead our cloud security initiatives. The ideal candidate will possess extensive knowledge of AWS security services, strong leadership skills, and ability to drive complex security projects.About the Role:The successful candidate will oversee the design, implementation, and...


  • Washington, United States Apex Systems Full time

    Cloud Security Engineer- Posture Management Locations: Chicago, IL / Denver, CO / Washington, DC - 3X A WEEK ON-SITE $80/hour on W2 W2 ONLY Unable to work C2C Join our team as a Cloud SIEM Engineer and play a crucial role in enhancing our security posture. We seek a dedicated professional passionate about security and innovation to help protect our assets...


  • Washington, United States Apex Systems Full time

    Cloud Security Engineer- Posture Management Locations: Chicago, IL / Denver, CO / Washington, DC - 3X A WEEK ON-SITE $70-$80/hour on W2 W2 ONLY Unable to work C2C Join our team as a Cloud SIEM Engineer and play a crucial role in enhancing our security posture. We seek a dedicated professional passionate about security and innovation to help protect our...


  • Washington, United States Apex Systems Full time

    Cloud Security Engineer- Posture Management Locations: Chicago, IL / Denver, CO / Washington, DC - 3X A WEEK ON-SITE $70-$80/hour on W2 W2 ONLY Unable to work C2C Join our team as a Cloud SIEM Engineer and play a crucial role in enhancing our security posture. We seek a dedicated professional passionate about security and innovation to help protect our...


  • Washington, United States Educology Solutions Full time

    ESI is seeking a Senior Cloud Security Engineer to support work one of our customers. Duties & Responsibilities Deployment and ongoing maintenance of the AWS cloud security controls, as established by HBX. Identifying, deploying, and maintaining necessary cloud security controls; and ensure secure operation and maintenance of HBX 's AWS environment(s)....


  • Washington, United States Global Solutions Consulting (GSC) Full time

    Job DescriptionJob DescriptionPosition Title: Senior Application Security EngineerLocation: Washington, DC (Hybrid)Job Requirements:Strong written and verbal communication skills· Must have GitLab CI/CD pipeline experience· Assist in the development and implementation of the DevSecOps strategy to include the definition and goals of the over-arching...