Senior Security Engineer - Third-Party Software Supply Chain

Amazon Web Services (AWS); Austin (TX); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Health insurance

RSU program

Paid time off

401(k) matching

Job summary

Amazon.com Services LLC is seeking a senior security leader to own Third Party Software and Software Supply Chain Vulnerability Management. You will apply offensive security, threat intelligence, and penetration testing to identify attack paths in vendor software and package registries, and to determine mitigation priorities at scale.

You will build the security bar for top CI/CD toolchains, drive rapid response to supply chain incidents, and deliver validated designs to SDEs for scalable

Qualifications

• 5+ years identifying security issues and risks and developing mitigation plans
• 4+ years troubleshooting systems issues, analyzing logs, or automating tasks
• 4+ years scripting, programming, and security code review in common languages
• Experience in industry-based security vulnerabilities identification, attack patterns, and remediation techniques

Responsibilities

• Hunt for attack paths through third party software and supply chain components using penetration testing and threat intelligence
• Define and enforce security bar for curated package registry and CI/CD toolchains
• Build and test detection-to-block automation to mitigate supply chain incidents
• Raise security bar across code repositories via architecture and code reviews and reusable frameworks
• Mentor security engineers and communicate risk assessments to peers and leadership

Skills

Security concepts

Penetration testing

Threat intelligence

Threat modeling

Job description

Amazon.com Services LLC is seeking a senior security leader to own Third Party Software and Software Supply Chain Vulnerability Management. You will apply offensive security, threat intelligence, and penetration testing to identify attack paths in vendor software and package registries, and to determine mitigation priorities at scale.

You will build the security bar for top CI/CD toolchains, drive rapid response to supply chain incidents, and deliver validated designs to SDEs for scalable