Sr. Security Engineer, AWS Support - Kumo, Kumo

Amazon • Herndon, VA

1d • Onsite

About The Position

Help us protect not only the Amazon Web Services (AWS) cloud computing environment but all of our customers as well! As a Security Engineer in AWS Support-Kumo, you will be on the forefront of many security issues for a wide variety of platforms and technologies including cloud services, GenAI, identity and access management, mobile devices, all operating at massive scale. You will have direct impact on the experience of customers and their security efforts through building the next generation of AI powered solutions. We are looking for an Security Engineer to help validate that our services, applications, and tools are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues in the design phase, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our high-tech services. A Security Engineer at Amazon/AWS is expected to be efficient in multiple domains and provide significant contributions to the AWS Support & Security teams. Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. The ideal candidate has strong technical knowledge in secure software development, high judgment to prioritize and address security risks, and experience holding high standards for security controls and work products. Engineers in this role are expected to participate fully in the planning of the AWS Support team's work and constantly seek opportunities for process improvement. The ideal candidate combines deep technical expertise with exceptional leadership and communication skills. You'll need to clearly articulate complex security risks to both technical and non-technical audiences, effectively harmonize diverse perspectives, and skillfully prioritize risks to guide teams toward secure solutions through influence and collaboration. This role requires a security professional who thrives when partnering closely with product and engineering teams to deliver the most secure customer solutions possible. AWS Kumo combines the culture of a startup, the innovation and creativity of an R&D Lab, the work-life balance of a mature organization, and provides amazing technical challenges at AWS's scale. Our team provides technology and trusted expertise that intelligently anticipate and resolve AWS customer needs, helping them adopt, optimize, and operate at scale. Kumo’s products, used by AWS customers and the support teams that help them, are vital to ensuring exceptional customer experiences on AWS. Our team owns customer facing applications like Trusted Advisor, Personal Health Dashboard, AWS re:Post, and Support Center and multiple internal tooling systems. We are a highly innovative global organization revolutionizing the way customers engage and seek help from AWS. Support provides a strategic advantage for customers adopting AWS and drives direct revenue to the business.

Requirements

• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience as a mentor, tech lead or leading an engineering team

Nice To Haves

• Experience applying threat modeling or other risk identification techniques or equivalent
• Experience with security in service-oriented architectures/microservices and web services

Responsibilities

• Drive security decisions across product development workstreams
• Partner with engineering leaders across Kumo to reduce the friction for builders to develop services that are secure-by-design
• Projects and software development work as needed
• Security training and outreach to internal development teams
• Security guidance documentation
• Security tool development
• Security metrics delivery and improvements
• Assistance with recruiting activities and administrative work

Benefits

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed