Principal Security Solution Architect

Job description

DESCRIPTION

At Amazon Web Services (AWS), Security is our highest priority. Today, the AWS Partner Network (APN) supports tens of thousands of consulting and technology partners who in turn serve AWS customers across virtually every industry, segment, and geography. As such we are constantly evolving our systems to support this vast network and are looking for a highly skilled & motivated security architect to design and build secure solutions, participate and coordinate cross-organization security initiatives, and solve security challenges within APN at scale. This is an exciting and visible role – you will directly influence the security postures for our APN products and services. You will regularly interact with world-class engineers and senior leadership

As a Principal Security Solution Architect, you will develop elegant solutions to complex Partner program security needs, as well as design response remediation strategies to safeguard Partner and Customer trust. You will help ensure our applications, services and systems are designed and implemented to the highest standards and resilient to modern threats without sacrificing flexibility needed in the business.

If you enjoy enabling others while keeping them safe, discovering and addressing security issues, and quickly reacting to new threat scenarios, this role will provide you with a challenging opportunity. You will lead security and process assessments, work together with AWS Security teams on risk analysis, vulnerability testing, and security reviews across all elements of the Partner Network. Ongoing end to end process evaluation will help you find further opportunities to improve, while you bridge the gap until process improvements are complete.

You will tackle challenging, novel situations every day. You should be comfortable with a high degree of ambiguity, communication with many stakeholders and distributed teams, and thrive on solving problems that haven’t been solved at scale before. Expect to collaborate with product, field, and Partner teams on customer-facing initiatives, and in the process build your personal brand at Amazon. Once you learn, teach others. Find your industry voice through blog posts, whitepapers, technical webinars, and workshops. Lastly, bring your Think Big ideas to life, potentially creating new product and services across any area of Amazon.

PREFERRED QUALIFICATIONS

· Masters or PhD in Computer Science or related field
· Demonstrate innovative security approaches in non-traditional IT environments
· Experience with common attack patterns and exploitation techniques
· Experience developing and implementing security protocols
· Prior experience working with either Consulting or Technology Partner communities
· Demonstrated ability to work strategically in the face of business, product, and technical challenges
· Executive presence, polished presentation skills, and stellar written communication
· Goals and metrics oriented, with the ability to manage multiple priorities in a fast-paced environment.
· Strong verbal and written communications skills are a must, as well as the ability to work effectively across internal and external organizations.
· Meets/exceeds Amazon's leadership principles requirements for this role
· Meets/exceeds Amazon's functional/technical depth and complexity for this role

Amazon is an Equal Opportunity-Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation / Age.

Desired profile

BASIC QUALIFICATIONS

· BS in Computer Science or related field, or equivalent work experience
· Knowledge of system security vulnerabilities and remediation techniques
· Fluency in common attack patterns and exploitation techniques
· Demonstrated ability to present complex technical information in a clear and concise manner to a variety of audiences, including issue details, impact, and mitigation efforts
· 7+ years of experience in identifying security issues and risks, and developing mitigation plans
· 5+ years of highly technical, hands-on job experience related to cloud workloads in some combination of having been a customer, pre-sales support, or solution architect
· 3+ years of experience in vulnerability testing and auditing
· 3+ years of experience in network, system or software architecture; design, implementation, support and evaluation of security-focused tools and services
· 3+ years of scripting or programming experience in Ruby, Python, some sort of shell scripting, Java, C/C++, C#, Perl, or other languages
· 2+ years of experience in one or more of the following areas: cryptography, web and network protocols, data structures and algorithms, software development, threat modeling, pen tests or vulnerability assessments.