AWS SECURITY ENGINEER

Job description

DESCRIPTION

Amazon Web Services (AWS) is the largest Cloud provider in the world and our security teams solve some of the most challenging and exciting problems to effectively mitigate large-scale threats.

Are you interested in driving exceptional security for customers? Do you have a passion for cutting-edge technologies? Do you see compliance and security as business enablers? Amazon Web Services (AWS) business is rapidly expanding its global presence, and we are looking for a highly motivated Security Engineer to help support our Special Projects, Issues, and Remediation (SPIR) team. As part of the AWS SPIR team, this role will help build solutions between security, technology, and compliance by working directly with our AWS service, infrastructure, security, and related Amazon corporate teams. This candidate must be a technically experienced and an innovative security engineer who can dive deep into a variety of complex architectures, understand IT processes, and ensure product offerings are secure and meet emerging security needs. The role will help drive and scale the engineering and architecture readiness program through innovative changes across multiple organizations and teams.

A Security Engineer at AWS is expected to be technically capable in multiple domains and will be sought out for advice on a variety of technical issues. A Security Engineer will proactively share knowledge across the AWS community and will be a key company resource in one or more of the core areas of security. They will lead security campaigns for large Amazon projects while setting standards and defining best practices for AWS Security.

Engineers in this role must show excellent judgment in making technical trade-offs between short versus long-term security and business goals. They must also demonstrate resilience and navigate difficult situations with composure and tact. Successful engineers in this role will regularly analyze their own performance with a critical eye.

PREFERRED QUALIFICATIONS

· MS in Computer Science, Networking, Information Systems, Computer Engineering, Systems Engineering or 6+ years’ equivalent experience
· Minimum of one year experience in executive communications or technical writing; clear, concise, and thorough written and oral communication skills.
· Two plus years experience on a security engineering or operations team, experience coordinating responses to security incidents, or operating in a SOC/SIC environment
· Three plus years experience dealing with computing security issues and threat vectors
· Security related certifications
· Two plus years experience in evaluating, recommending, and implementing new and emerging security products and technologies
· One plus year experience with large enterprise environments
· One plus year experience with AWS products and services
· One plus year experience with cross-organizational collaboration and negotiation
· Meets/exceeds Amazon’s leadership principles requirements for this role
· Meets/exceeds Amazon’s functional/technical depth and complexity for this role

Please email Pedro Garcia (garciaws@Amazon.com) for more information.

Amazon Web Services: http://aws.amazon.com/

Amazon is an Equal Opportunity Employer – Minority / Women / Disability / Veteran / Gender Identity / Sexual Orientation / Age

Desired profile

BASIC QUALIFICATIONS

BASIC QUALIFICATIONS
· BS in computer science, networking, information systems, computer engineering, or 4+ years’ equivalent experience
· Minimum of two years’ experience in network, system, or software architecture; design, implementation, support, and evaluation of security-focused tools and services
· Minimum of one year experience in identifying security issues and risks, and developing mitigation plans
· Minimum of one year scripting or programming experience in Ruby, Python, Shell/BASH scripting, Java, C/C++, Perl, or other languages
· Minimum of one year experience in three or more of the following areas: cryptography, web and network protocols, data structures and algorithms, software development, threat modelling, pen tests, or vulnerability assessments