Sr. Security Engineer, AWS Center for Quantum Computing

Amazon • Pasadena, CA

80d • $143,300 - $247,600

About The Position

The Amazon Web Services (AWS) Center for Quantum Computing (CQC) in Pasadena, CA, is seeking a Security Engineer who will design and oversee the security operations of a growing research and development (R&D) effort. This role requires some on site activity, roughly 1 to 2 times per week. As a security expert, you will own the completion of a threat model and security plan for our research spaces and will lead an array of projects and security initiatives/activities designed to protect your fellow Amazonians, R&D facilities, and critical cloud infrastructure from all categories of threats. You will define, document, and educate policies/workflows for our labs, which span across academic, corporate, and industrial spaces. You obsess over internal and external customers and successfully deliver support and services in a fast-paced environment where priorities shift quickly. You are also independent and can manage program security projects under minimal supervision, continuously triage and prioritize accordingly, communicate clearly, think outside the box, and deliver exceptional results. By delivering a highly secure yet flexible R&D environment, successful candidates will enable a team of scientists and engineers to secure quantum technologies for our global AWS customer base.

Requirements

• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• 5+ years of work in identifying security issues and risks, and developing mitigation plans
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages
• Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
• Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• Experience working in identifying security issues and risks, and developing mitigation plans
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience as a mentor, tech lead or leading an engineering team
• 5+ years relevant security engineering work experience, or a Bachelor’s degree in Cybersecurity, Computer Science/Engineering, Electrical Engineering, Informatics, or related academic degrees
• 5+ years of professional work experience as a security expert in one or more of these areas: security engineering, scientific research, engineering research and development
• Hands-on experience with security lifecycle activities including threat modeling, risk analysis, design review, and testing
• Strong understanding of adversary TTPs and experience with threat detection, response, and recovery

Nice To Haves

• Experience applying threat modeling or other risk identification techniques or equivalent
• Experience with security in service-oriented architectures/microservices and web services
• Interest in learning Quantum Technologies
• Effective teacher and instructor, with experience developing and delivering training to security, technical, and business professionals
• Ability to develop and deliver security awareness training programs
• Excellent written communication skills, with a focus on translating technically complex security issues into simple, easy to understand concepts for business and technical leadership
• Experience writing and publishing security standards
• Ability to manage tactical (daily) operations and participate in development of strategic program plans
• Understanding of crisis operations, risk management, and crisis communication
• Understanding of business continuity and incident command system
• Strong working knowledge of access control systems and physical security systems/components
• Experience in providing security oversight at data centers or research lab environments/equivalent

Responsibilities

• Work with internal stakeholders, academic and corporate partners to meet or exceed Amazon security bar
• Understand software lifecycle on scientific equipment and mitigate physical and logical risks
• Perform periodic reviews of software baselines and network activity
• Manage security reviews of internally used, external-facing, or third-party applications
• Create and maintain detailed inventories of sensitive hardware and software
• Audit equipment and software before commissioning in a development or production environment

Benefits

• 401k
• health_insurance
• dental_insurance
• vision_insurance
• life_insurance
• disability_insurance
• paid_holidays
• paid_volunteer_time
• tuition_reimbursement
• professional_development
• flexible_scheduling
• employee_stock_purchase_plan

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Bachelor's degree