Senior Security Engineer, Audible Security

Servicios Comerciales Amazon Mexico S. De R.L. De C.V. - D44; Xico; Presencial; MXN 1,253,000 - 1,612,000; Jornada completa

Descripción de la vacante

A leading producer of audio storytelling is seeking a Senior Security Engineer in Xico, Mexico. The successful candidate will work with various teams to advocate for information security throughout software development. Responsibilities include conducting security reviews, penetration testing, and collaborating on security tooling enhancement. Candidates should have strong programming skills, particularly in Python and Java, with at least 3 years of relevant experience. A degree in computer science or STEM field is required.

Formación

• 3+ years of programming in Python, Ruby, Java, or similar languages.
• Experience in scripting and security code reviewing.
• Knowledge of industry-based security vulnerabilities.

Responsabilidades

• Contribute to security review methodologies for testing production services.
• Conduct penetration testing and vulnerability research.
• Collaborate with internal teams to enhance security tooling.

Conocimientos

Programming in Python

Programming in Java

Networking protocols knowledge

Security code reviewing

Troubleshooting system issues

Educación

Bachelor's degree in computer science

STEM degree or equivalent experience in IT Security

Herramientas

AWS products and services

Command line tools

Descripción del empleo

DESCRIPTION :

At Audible, we believe stories have the power to transform lives.

It's why we work with some of the world's leading creators to produce and share audio storytelling with our millions of global listeners.

We are dreamers and inventors who come from a wide range of backgrounds and experiences to empower and inspire each other.

Imagine your future with us.

ABOUT THIS ROLE

As a Security Engineer at Audible you will advocate for information security throughout all our software development and business processes.

You will work with other Security Engineers, Application Developers, System Engineers, and Business Stakeholders to protect our customers and Audible's business.

ABOUT THE TEAM

As a Senior Security Engineer, you will...

• Contribute to designing, implementing, and executing security review and test methodologies for recurring testing of critical production services
• Partner with service teams to ensure risks are remediated
• Conduct design review, threat modeling, security review, and penetration testing on production systems
• Scope and perform penetration testing and vulnerability research on complex proprietary software and hardware
• Collaborate with internal development teams at Audible and Amazon to enhance security tooling and functionality at scale
• Prepare and present detailed, written technical information for internal and external audiences
• Participate in third party security risk assessments and due diligence (including helping to secure third-party integrations and partnerships)
• Provide guidance on risk, compliance, and policy to technical and non-technical internal customers, including security training and outreach to internal teams and external supply chain partners

ABOUT AUDIBLE

Audible is the leading producer and provider of audio storytelling.

We spark listeners' imaginations, offering immersive, cinematic experiences full of inspiration and insight to enrich our customers daily lives.

We are a global company with an entrepreneurial spirit.

We are dreamers and inventors who are passionate about the positive impact Audible can make for our customers and our neighbors.

This spirit courses throughout Audible, supporting a culture of creativity and inclusion built on our People Principles and our mission to build more equitable communities in the cities we call home.

BASIC QUALIFICATIONS

• 3+ years of programming in Python, Ruby, Go, Swift, Java
• Net, C++ or similar object-oriented language experience
• Bachelor's degree in computer science or equivalent
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
• Experience in troubleshooting system issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)

PREFERRED QUALIFICATIONS

• 2+ years of any combination of threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
• Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP
• Experience with AWS products and services
• Experience with programming languages such as Python, Java, C++
• Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing