Senior Security Engineer, AWS Vulnerability Management, AWS Vulnerability Management - Host OS and Third Party Software
Application Security
Aws Cloud Security
Cloud Platforms
Cloud Security
Cybersecurity Operations
Data Security
DevOps
DevSecOps
Facilities Management
Incident Management
Incident Response
Information Security
InfoSec
Management
Product Security
Project Management
Risk Management
Security
Security Automation
Security Compliance
Security Devops
Security Operations
Security Standards
Security Testing
Software Security
Software Supply Chain Security
Vulnerability Assessment
Vulnerability Management
Job Description
Senior Security Engineer role for AWS Vulnerability Management, focused on Third Party Software and software supply chain vulnerability management for Amazon’s environment.
Responsibilities
- Research and hunt for adversary attack paths through Amazon third party software packages and supply chain components; use penetration testing and threat intelligence to prioritize which risks to close first.
- Define and enforce the security bar for Amazon’s curated package registry and top CI/CD toolchains; close high-risk bypass paths and provide validated designs for software development engineers to implement.
- Design, build, and test detection-to-block automation to mitigate supply chain incidents within minutes.
- Lead rapid response efforts for zero-day vulnerabilities impacting internet-facing third party appliances.
- Raise security standards across code repositories via architecture review, code review, and reusable frameworks engineering teams can adopt with minimal effort.
- Mentor security engineers and help shape a culture of fast, pragmatic security solutions; communicate risk assessments and design decisions to technical peers and senior leadership.
Requirements
- 5+ years experience identifying security issues and risks and developing mitigation plans.
- 4+ years (non-internship) experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
- 4+ years (non-internship) scripting, programming, and security code review using common programming languages.
- Industry experience (non-internship) identifying security vulnerabilities, attack patterns, and remediation techniques.
- Knowledge of at least two programming languages: Scala, Java, Python, C/C++, or Go.
- Experience mentoring, serving as a tech lead, or leading an engineering team.
Technologies
- Scala
- Java
- Python
- C/C++
- Go
Location & Work Type
- Austin, TX
- Onsite
Salary
- USD 178,400 - 226,700 per year
Benefits
- Sign-on payments
- Restricted stock units (RSUs)
- Health insurance: medical, dental, vision, prescription, Basic Life & AD&D, with option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage
- 401(k) matching
- Paid time off
- Parental leave
Preferred Qualifications
- 3+ years of any combination of: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing.
- Experience applying threat modeling or other risk identification techniques (or equivalent experience).
- Experience with security in service-oriented architectures/microservices and web services.
Similar Jobs
