Security Engineer II, Customer Service Security Response Operations (CSSRO)

Amazon•Seattle, WA

10h

About The Position

Amazon Security is looking for Security Engineers to join out Customer Service Security (CSS) team. CSS is the first line of defense protecting our Customers and their interests from technical & malicious adversaries, seeking to steal their data and/or cause them harm. We are looking for Security Engineers who are ready to take on a front-line role in addressing security issues facing the largest Customer Service operation in the world, where customer obsession equals protection. Security issues at this scale and speed require a passion for engineering robust solutions to complex security challenges, as well as the ability to quickly design and build solutions to address them. CS Security is looking for Security Engineers to ensure that our Customer protection is always the priority. We drive incidents to the highest standards, to maintain and enhance internal and external customer trust. If you enjoy analyzing, engineering and architecting solutions to deliver results faster, and you are skilled at investigating security issues and new threat scenarios, this position will provide you with a challenging opportunity to work alongside world-class talent in solving complex and far-reaching problems. A successful candidate will have a good mix of deep technical knowledge and a demonstrated background in Security Engineering and Architecture activities. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Requirements

3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
Knowledge of industry-based security vulnerabilities and remediation techniques

Nice To Haves

2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
Experience with AWS products and services
Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Responsibilities

Serve as a Subject Matter Expert (SME) on the incident response & technical investigation lifecycle, owning the deep dive and coordination to turn data into information.
Respond to Incidents in a timely manner, providing leadership & guidance to all security analysts.
Conduct deep-dive investigations into threat and fraud abuse reports and detections
Influence service teams across Amazon to develop systems and processes with security best practices.
Attend internal and external training regarding security engineering and response.
Find opportunities to improve from large-scale security incident investigations.
Participate in or lead post-mortem analyses.
Design & Build security-related services for internal customers.
Develop and mentor other security engineers, analysts, investigators, and software developers.