3p SaaS Security Engineer

Job description

DESCRIPTION

You have hundreds of thousands of hosts, hundreds of millions of lines of code, billions of online transactions, and one of the most visited sites on the Internet. And that’s the easy half your job. Now help Amazon teams securely integrate all of the above with third party cloud services.

At Amazon, we obsess over our customers, and ensuring our customers’ trust is our first priority. To earn that trust in an online world where threats grow ever more sophisticated requires building a world-class security team to tackle never-before-seen challenges at dizzying scales. You will not just be using cutting-edge technologies here in Amazon; you will be inventing them.

Amazon.com is looking for experienced Security Engineers to ensure that Amazon’s use of external infrastructure is designed and implemented to the high standards required to maintain and enhance customer trust. You will participate in the design, build and deployment of security-focused infrastructure as well as provide consultation, architectural review, risk analysis, vulnerability testing and security reviews of many elements of Amazon’s systems.

PREFERRED QUALIFICATIONS

• Bachelor's Degree or equivalent and at least 3 years of relevant experience.
• Strong knowledge of Unix/Linux.
• Strong knowledge of AWS services (EC2, SQS) and security tools( VPC, IAM, KMS)
• Strong threat modeling and ability to explain technical risks in business terms.
• Experience integrating cloud services, especially Salesforce
• Experience with intercompany authentication and federation (SAML, OAUTH)
• Experience in deploying and supporting web and/or two-tier applications in a 24x7 production environment.
• Scripting skills (e.g., Python, shell scripting)
• Knowledge of network and web related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols)
• Excellent written and verbal communication skills
• Excellent leadership skills and teamwork skills
• Results oriented, high energy, self-motivated
• Working knowledge of application and infrastructure security

Desired profile

BASIC QUALIFICATIONS

Key tasks include:
• Developing documentation and standards for Amazons use of 3rd party cloud systems.
• Conducting security audits, vulnerability assessments and product selection of 3rd party cloud services.
• Designing services and tools for monitoring and securing third party infrastructure, and integrating with Amazon’s security and Infrastructure.
• Providing consulting to Amazon developers and business teams working on 3p integrations.
• Advising Amazon’s vendors and third party partners in how to use AWS services and secure engineering to meet Amazon’s vendor requirements.
• Designing and operating scalable tools to monitor Amazon’s use of external systems.