Security Engineer , Ads Security

Socket.dev; New York (NY); On-site; USD 159,000 - 213,000; Full time

Job summary

Socket.dev is seeking a Security Engineer in New York to help build secure and resilient advertising platforms. You will lead security assessments, perform threat modeling, secure design reviews, code reviews, and penetration testing to protect customer data and critical infrastructure.

You will collaborate with product and engineering teams to design secure systems, develop custom tools, and drive security automation across the stack, while fostering a security-conscious culture and sharing

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar.
• 2+ years of scripting, programming, and security code review.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating tasks.
• Bachelor's degree in computer science or equivalent.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Responsibilities

• Conduct threat modeling, code review and penetration testing to identify security vulnerabilities in advertising applications and infrastructure.
• Contribute to security automation tooling for designing new detections within Amazon’s various security detection frameworks.
• Identify actionable solutions for identified vulnerabilities and collaborate with ads product and engineering teams to influence and prioritize their resolution.
• Contribute to fostering a strong security culture at Amazon through knowledge sharing and collaboration.
• Engage in cross-team projects aimed at enhancing the security posture of Amazon and customer data throughout its lifecycle.

Skills

Programming languages

Scripting

Troubleshooting

Security code review

Bachelor's degree

Education

Bachelor's degree in computer science or equivalent

Tools

AWS services

Job description

The ideal candidate will have a broad understanding of proactive security, have past experience leading security assessments, and have the ability to work with product and engineering teams in designing secure systems. In this role, you will conduct secure design reviews, code review and penetration testing, develop custom tools and frameworks to assist in proactive security and collaborate with product and engineering teams to build secure and resilient solutions. Your role will be pivotal in ensuring the protection of customer data and critical infrastructure within the Ads organization.

Key job responsibilities

As a Security Engineer within Amazon’s Ads Security team, you will play a crucial role in ensuring that applications across numerous Ads platforms are designed and executed with the highest security standards to maintain customer trust. You will tackle a diverse array of security challenges, ranging from novel attack vectors in Ads services to selecting and implementing scalable and secure features. Additionally, you will serve as a subject matter expert, providing guidance to developers on building secure products and fostering a security-conscious culture within the organization.

• Conduct threat modeling, code review and penetration testing to identify security vulnerabilities in advertising applications and infrastructure.
• Contribute to security automation tooling for designing new detections within Amazon’s various security detection frameworks.
• Identify actionable solutions for identified vulnerabilities and collaborate with ads product and engineering teams to influence and prioritize their resolution.
• Contribute to fostering a strong security culture at Amazon through knowledge sharing and collaboration.
• Engage in cross-team projects aimed at enhancing the security posture of Amazon and customer data throughout its lifecycle.

A day in the life

Activities in this role include:

• Identifying security vulnerabilities in advertising applications and infrastructure.
• Influencing product teams and senior leadership to implement practices that maintain a high security bar.
• Proposing, collaborating & obtaining buy-in on strategic security initiatives.
• Recommending and developing security-focused tools that help product teams prevent security misconfiguration & vulnerabilities at scale.

About the team

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let this stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in computer science or equivalent
• Knowledge of industry-based security vulnerabilities and remediation techniques

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
• Experience with AWS products and services
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, NY, New York - 159,300.00 - 212,800.00 USD annually