Security Engineer: Threat Modeling & Secure Coding

Amazon; New York (NY); On-site; USD 159,000 - 213,000; Full time

Benefits offered by this job

Health insurance

RSUs

Sign-on payments

Job summary

Amazon Security in New York seeks a Security Engineer to collaborate with software teams, inspecting code, building secure frameworks, and shaping secure services. In a given day you might inspect code for security issues, build a new framework to help developers build faster and more securely, or fine-tune the design for a new service alongside its software developers.

The ideal candidate blends technical acumen with the ability to lead by influence and communicate risk clearly to both

Qualifications

• 3+ years programming in Python, Ruby, Go, Swift, Java, .Net, or C++.
• Bachelor's degree in STEM or IT Security.
• Knowledge of HTTP, DNS and TCP/IP.
• Knowledge of security vulnerabilities and remediation techniques.
• Experience troubleshooting, log analysis, or automating tasks via CLI.
• Ability to explain complex risks to non-technical audiences.

Responsibilities

• Define and drive implementation of proactive security controls for Ring 0 applications.
• Evaluate and implement security controls to ensure secure development by default.
• Assess and mitigate security risks across projects.
• Build and drive adoption of security tooling to scale security across AppSec.
• Drive adoption of guardrails, testing frameworks, and monitoring across Ring 0 applications.
• Collaborate with Ring 0 teams to integrate security into development workflows.
• Develop and maintain security documentation including threat models and risk assessments.
• Support security incident investigations related to Ring 0 systems.
• Perform manual and automated secure code review (Java, Python, JavaScript).
• Identify and mitigate security issues at scale.
• Perform adversarial security analysis.
• Provide security guidance to internal teams, stakeholders, and leaders.
• Independently solve complex security problems.

Skills

Python

Java

C++

Go

Ruby

Swift

.NET

Education

Bachelor's degree in STEM

Tools

AWS

Git

Linux

Job description

Amazon Security in New York seeks a Security Engineer to collaborate with software teams, inspecting code, building secure frameworks, and shaping secure services. In a given day you might inspect code for security issues, build a new framework to help developers build faster and more securely, or fine-tune the design for a new service alongside its software developers.

The ideal candidate blends technical acumen with the ability to lead by influence and communicate risk clearly to both