Security Review Support Engineer, Shipyard

Amazon; Seattle (WA); On-site; USD 80,000 - 120,000; Full time

Job summary

Join a forward-thinking company as a Security Review Support Engineer, where you'll lead technical and security reviews for innovative devices. This role involves troubleshooting hardware and software issues, collaborating with vendors, and ensuring the highest standards of device cybersecurity. You'll work closely with business stakeholders and security partners to define risks and emerging threat vectors. If you're passionate about smart devices and enjoy solving complex technical challenges, this is the perfect opportunity to make an impact in a dynamic environment that supports a global real estate team.

Qualifications

• 4+ years of software development or technical support experience required.
• Experience in troubleshooting and documenting findings is essential.

Responsibilities

• Design and maintain test fixtures for software verification on real hardware.
• Conduct security reviews and perform penetration testing.

Skills

Software Development

Technical Support

Scripting in Modern Programming Languages

Troubleshooting Technical Systems

Information Security Reviews

Agile/Scrum

Tools

UNIX/Linux

RESTful APIs

IoT

SCADA

PLC

Job description

Security Review Support Engineer, Shipyard

Job ID: 2957606 | Amazon Development Center U.S., Inc.

Are you passionate about smart devices that utilize new technologies? Are you curious about how things work? Do you enjoy figuring out why things are broken and solving problems?

Amazon Shipyard operates a device lab in Seattle dedicated to supporting our Global Real Estate and Information Security functions. The Security Review Support Engineer will lead technical and security reviews for building devices and lead or participate in company-wide user groups to exchange support information, procedures, and best practices. Installing new types of devices, hooking up test equipment, troubleshooting, communicating with vendors, and communicating risks are key to success in the role. You will own the quality and availability of your work and be expected to hold a high bar for device cybersecurity. A substantial portion of your responsibilities will include documenting systems, security findings, and controls.

Key job responsibilities:

1. Design, set up and maintain test fixtures to verify software on real hardware
2. Troubleshoot hardware, software and networking issues
3. Contribute to engineering efforts from design to implementation, solving complex technical challenges around developer and engineering productivity and velocity especially as it relates to rapid iteration
4. Drive adoption of best practices in secure system design
5. Conduct security reviews for hardware including servers and devices
6. Perform penetration testing & vulnerability research
7. Engage in threat modeling

A day in the life:
We partner closely with both the Global Real Estate Business and Amazon Security to ensure that device systems are procured and implemented securely. Your daily work might include:

1. Meeting with business stakeholders to understand their requirements
2. Working with vendors to understand their product's security protections
3. Setting up test device systems for analysis
4. Working with security partners to define and communicate risks
5. Ideating and defining emerging threat vectors in the Operational Technology space

About the team

The Global Real Estate and Facilities (GREF) Tech team, part of Finance Automation, develops services, products, and tools to enable Amazon's corporate real estate team to build and operate the company's global facilities in more than 60 countries, which is the largest corporate real estate footprint in the world. We develop building systems that deliver a seamless, adaptive, and creative workspace experience to more than half a million employees. Our mission is to create technology that simplifies the processes Amazon employs to manage its corporate real estate. Our teams build services and products that support various GREF domains, including space and occupancy planning, design and construction, employee health and safety, sustainability, and building management systems requiring IoT expertise. If you possess the skills to build, operate, and scale the next generation of distributed systems supporting Amazon's growth, this role may be well-suited for you.

BASIC QUALIFICATIONS

- 4+ years of software development, or 4+ years of technical support experience
- Experience scripting in modern programming languages
- Experience troubleshooting and debugging technical systems
- Experience in agile/scrum or related collaborative workflow
- Experience troubleshooting and documenting findings
- Experience preparing or conducting information security reviews

PREFERRED QUALIFICATIONS

- Knowledge of distributed applications/enterprise applications
- Knowledge of UNIX/Linux operating system
- Experience analyzing and troubleshooting RESTful web API calls
- Experience working with OT, ICS, IoT, IIoT, BMS, SCADA, and/or PLCs

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit this link for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.