Cloud Security Engineer III — Proactive Risk & Frameworks

VulnU; Seattle (WA); Hybrid; USD 178,000 - 227,000; Full time

Job summary

Amazon is seeking a Security Engineer III in Seattle, WA. You will lead complex security reviews, threat modeling, and investigations, designing scalable security frameworks and rubrics for multiple services.

You will collaborate with product owners to validate controls and guide secure design decisions, including code reviews and detections. You will mentor engineers and help establish mature security practices across the team.

Qualifications

• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• 5+ years of work in identifying security issues and risks, and developing mitigation plans.
• 4+ years of scripting, programming, and security code review in common languages.
• Knowledge of at least two languages: Scala, Java, Python, C/C++, or Go.
• Experience in industry-based security vulnerabilities identification, attack patterns, and remediation techniques.
• Experience as a mentor or tech lead.
• Experience applying threat modeling or other risk identification techniques.
• Experience with security in service-oriented architectures/microservices and web services.

Responsibilities

• Lead complex security reviews, threat modeling exercises, and security investigations across your team and partner teams, identifying risks and mitigating strategies.
• Design and build security frameworks, runbooks, and rubrics for new problem domains for scalable reuse.
• Engage with product and system owners to review architectures, validate security controls, and guide secure design decisions.
• Clearly communicate risk and design decisions in writing for technical and non-technical audiences and build consensus.
• Mentor and coach multiple security engineers and help establish mature security practices.

Skills

Troubleshooting

Security analysis

Scripting

Programming

Threat modeling

Mentorship

SOA security

Multiple languages

Job description

Amazon is seeking a Security Engineer III in Seattle, WA. You will lead complex security reviews, threat modeling, and investigations, designing scalable security frameworks and rubrics for multiple services.

You will collaborate with product owners to validate controls and guide secure design decisions, including code reviews and detections. You will mentor engineers and help establish mature security practices across the team.