Stores Security Engineer II: Threat Modeling & Secure Coding

Amazon Inc.; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com Services LLC is seeking a(Security Engineer) to collaborate with software teams, review code for security issues, and develop automation to strengthen secure software delivery. You will lead risk assessment and design guidance while communicating clearly to both technical and non-technical audiences.

Join the Stores AppSec organization to advance secure development practices, influence project priorities, and drive secure solutions across services that span cloud, devices, and retail

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non‑internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non‑internship) experience
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript
• Development of security automation tools
• Adversarial security analysis using modern tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes

Skills

Python

Ruby

Go

Swift

Java

.Net

C++

Object oriented programming

Networking protocols (HTTP/DNS/TCP-IP)

Education

Bachelor's degree in computer science or equivalent

Tools

AWS

Command line tools

Job description

Amazon.com Services LLC is seeking a(Security Engineer) to collaborate with software teams, review code for security issues, and develop automation to strengthen secure software delivery. You will lead risk assessment and design guidance while communicating clearly to both technical and non-technical audiences.

Join the Stores AppSec organization to advance secure development practices, influence project priorities, and drive secure solutions across services that span cloud, devices, and retail