Sr. Security Engineer, AppSec - Amazon Stores Security
Job Description
Benefits
- Health insurance covering medical, dental, vision, prescription drugs, Basic Life & AD&D; option for Supplemental life plans; EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement
- 401(k) matching
- Paid time off
- Parental leave
This onsite position in New York, NY offers a competitive salary range of USD 175,100 to 236,900 per year. You will join a collaborative team focused on securing the software used by millions of customers.
Responsibilities
- Create, update, and maintain threat models across a diverse set of software projects
- Conduct manual and automated secure code reviews, with emphasis on Java, Python, and JavaScript
- Develop security automation tools to streamline processes
- Perform adversarial security analysis using innovative tooling to augment manual efforts
- Provide security training and outreach to internal development teams
- Offer security architecture and design guidance across projects
- Independently solve security problems that require novel approaches
- Influence team and partner processes, priorities, and decisions to improve outcomes
Technologies you'll work with
- Java
- Python
- JavaScript
- Scala
- C/C++
- Go
Requirements
- 4+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
- 5+ years identifying security issues and risks and developing mitigation plans
- 4+ years of non-internship scripting, programming, and security code review in common languages
- Knowledge of at least two of the following languages: Scala, Java, Python, C/C++, or Go
- Experience in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
- Bachelor's degree
- Experience applying threat modeling or other risk identification techniques or equivalent
- Broad and deep knowledge across application security domains
- 8+ years of Application Security or Development experience