Security Engineer II - AMZ9081313, Devices and Services Security

Amazon•Sunnyvale, CA

About The Position

Provide frontline support for all information security related issues, such as penetration testing, network and service configuration, advising on security policy compliance, handling data confidentiality issues, and monitoring and responding to emerging threats. Contribute to the development of Information Security policies and process. Conduct application security reviews and recommend solutions to resolve application security issues. Provide information security support during events impacting tier one customer-facing services. Identify and troubleshoot recurring issues and escalate appropriately for full resolution.

Requirements

Bachelor’s degree or foreign equivalent degree in Computer Science, Engineering, Information Systems or Technology, Mathematics or a related field and one year of experience in the job offered or a related occupation.
Must have one year of experience in the following skill(s): application and infrastructure information security; application of threat modeling or other risk identification techniques; knowledge of system security vulnerabilities and remediation techniques, including penetration testing, source code review, configuring advanced runtime and static vulnerability testing tools and the development of exploits; programming in Java, C, C++, Perl, Ruby or Python; and coordinating responsibility of technical security tasks.
Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience
Knowledge of networking protocols such as HTTP, DNS and TCP/IP
Knowledge of industry-based security vulnerabilities and remediation techniques
Experience applying threat modeling or other risk identification techniques or equivalent
Experience in any combination of the following: application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development

Nice To Haves

2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience
Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
Experience with AWS products and services
Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++

Responsibilities

Provide frontline support for all information security related issues
Contribute to the development of Information Security policies and process
Conduct application security reviews and recommend solutions to resolve application security issues
Provide information security support during events impacting tier one customer-facing services
Identify and troubleshoot recurring issues and escalate appropriately for full resolution