Senior Security Engineer, Large-Scale Risk – Corporate Services Security

Amazon; Arlington (VA); On-site; USD 90,000 - 160,000; Full time

Job summary

Join a forward-thinking team as a Senior Security Engineer focused on large-scale risk reduction. This role is pivotal in securing critical business services at Amazon, where you will collaborate with diverse security teams to identify and mitigate systemic risks. You will leverage your expertise to drive strategic solutions and present compelling narratives to stakeholders. With a commitment to diversity and inclusion, Amazon offers a supportive environment that values work-life balance and continuous career growth. If you are passionate about security and eager to make an impact, this is the opportunity for you.

Qualifications

• 6+ years in security domains like Pentesting, Red Teaming, and Security Architecture.
• 3+ years with AWS technologies and experience in large organizations.

Responsibilities

• Identify systemic issues across the enterprise with Product Security and Red teams.
• Develop innovative tools and solutions for complex security problems.

Skills

Pentesting

Red Teaming

Security Architecture

Data Analytics

SDLC

Application Security

Python

C/C++

Lua

Golang

Rust

Tools

AWS

Job description

Senior Security Engineer, Large-Scale Risk – Corporate Services Security

Job ID: 2894261 | Amazon.com Services LLC

We are open to hiring candidates to work out of one of the following locations:
Seattle, WA, USA
Arlington, VA, USA

At Amazon, we are laser-focused on earning and maintaining customer trust. The Corporate Services Security team (CPSS) protects critical business services that our employees use to deliver the best products and services on planet earth.

Our Large-Scale Risk Reduction team (LSR) is looking for an innovative and impact-driven senior security engineer who has a strong passion for security at scale. The team secures the business by identifying systemic risk plaguing our corporate builder teams and building scalable solutions that lead to lasting change across the company.

A senior security engineer in this role will operate across multiple Amazon Security teams and will leverage their diverse and deep expertise to drive strategic risk reduction with business leaders at the highest levels. You will work with Product Security teams, Red teams, and Blue teams to identify patterns and root-cause, develop solutions with Amazon builder teams, and implement complex technical projects at Amazon scale.

Key job responsibilities

1. Work with Product Security teams, Red teams, and Defensive teams to identify systemic issues across the enterprise.
2. Partner with builder teams to understand the challenges they face, and root-cause issues using multiple perspectives.
3. Write compelling narratives for stakeholders to consume and understand risk and impact.
4. Write crisp executive summaries for presentation to stakeholders and executives.
5. Develop innovative accelerators, tools, and mechanisms to develop solutions for complex issues.
6. Facilitate forums with principal engineers to drive consensus on appropriate solutions.
7. Develop and propose solutions to solve complex security problems at-scale.

About the team

Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

BASIC QUALIFICATIONS

- 6+ years of experience in two or more of the following security domains: Pentesting, Red Teaming, Security Architecture, Data Analytics, SDLC, and/or Application Security
- 3+ years of experience with AWS technologies and services
- Experience driving deep dive campaigns in large, complex organizations
- Demonstrated proficiency with Python, C/C++, Lua, Golang, or Rust.

PREFERRED QUALIFICATIONS

- Experience as a software or devops engineer, or security engineer, working with developer teams that delivered commercial software or services
- Threat modeling experience with proficiency in cloud security architecture best practices
- Proficient in secure code review
- Threat hunting and/or detection engineering with experience in automation and orchestration
- Proficient with effective, if not scrappy, scripting
- Published CVEs, offensive/defensive tools, or articles
- GIAC Defensible Security Architecture (GDSA), OSCP, OSCE3, OSWE, or similar

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

Posted: January 3, 2025 (Updated about 13 hours ago)