דרושים Security Industry Specialist Regulatory Compliance ב-אמזון ב-United States, Austin

Key job responsibilities- Enhance detection engineering processes to improve the detection engineering lifecycle.
- Develop platform requirements used to enrich alerts, and automate remediation and response actions.
- Research and develop mechanisms across to enhanceMachine-Learning, advanced data correlation, risk-based alerting, or Generative AI.
- Provide tactical detection support during security incidents.
- Automate your way through challenges using Python or other scripting language.Work/Life BalanceTraining and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

- Experience triaging and developing security alerts and response automation, conducting front-line analysis, and providing escalation support
- Experience scripting with Python, Perl, Bash or PowerShell
- 1+ years of non academic experience in any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience

- Bonus: Experience using Machine-Learning, Large Language Models (LLM), or Agentic workflows

Key job responsibilities
As an SDE II, you’ll contribute to your team’s software, delivering features that span its life cycle. This includes working with your team to design solutions that enhance existing features and enable new ones. You’ll exercise autonomy and make trade-offs between feature development and operational work.You’ll also document your team’s software, including how it’s constructed, tested, operated, and secured, and how it fits into the bigger picture. You’ll train team members on these points and work alongside customers, stakeholders, and peers to ensure your solutions deliver real value.We’re committed to developing our people, and as an SDE II, you’ll mentor and guide others. You’ll also play a role in recruiting and interviewing for your team.

- 3+ years of non-internship professional software development experience
- 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience
- Experience programming with at least one software programming language

- 3+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
- Bachelor's degree in computer science or equivalent

The VMR Operations organization is looking for a Senior Security Engineer with deep technical expertise in security operations and vulnerability management to join us in building and maturing our VMR Operations programs. In this role, you will be responsible for defining and holding the security bar for VMR’s Campaign Management Program, which enables builders and drives remediation actions across Amazon. You will leverage relationships with engineers across Stores Security, business teams, and leaders throughout Amazon to ensure security, compliance, and privacy risks are correctly assessed and mitigations properly designed. You will build trust with senior engineers and leaders by leveraging your technical expertise to understand technical challenges, design improved solutions, and hold a high program bar. Finally, you will use your information security expertise to champion and drive risk-based decisions across complex, multi-disciplinary programs to ensure Amazon properly manages security risk.Key job responsibilities
You will be responsible for defining and enforcing the quality bar for all security, privacy, and compliance campaigns launched across Amazon.You will leverage relationships with engineers and managers across Stores Security to intake, prioritize, and launch security campaigns.You will build trust with Amazon builders by ensuring all campaigns we launch are of the highest quality bar, including clear descriptions of the security risk, steps for remediation, and insight to prevent future issues.You will partner with your peers to continuously improve the Campaign Management Program, with an emphasis on constant improvement through small, iterative changes to our processes and tooling.About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture.
Mentorship and Career growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

- Bachelor's Degree in Computer Science, Computer Engineering, Software Engineering, Cybersecurity, or related technical degree; or 4+ years equivalent technology experience.
- 7 years engineering experience in system, network, and/or application security or the development of security products.
- 5 years experience improving accuracy of vulnerability detection mechanisms across a diverse technical ecosystem.
- 5 years experience and deep knowledge of vulnerabilities, exploits and vulnerability management systems. Experience building applications or systems on cloud-based services.

- Understanding of networking, operating system internals, and system design.
- Experience across the vulnerability management and remediation lifecycle from assessment through remediation.
- Experience with developing exploits, host-based, and container-based detections.
- Experience with AWS services.

Key job responsibilities-Design, script, and implement quick proof-of-concepts for vulnerability detection, assessment, and remediation across host and container environments, enabling rapid validation of new solutions and approaches
-Collaborate with TPMs and SDE teams to translate program requirements into technical specifications, ensure seamless integration with existing systems, and conduct user acceptance testing for new security capabilities
-Build queries and analyze data to extract actionable insights on vulnerability management effectiveness, supporting data-driven decision making and informed program improvements
-Conduct security research and analysis on emergent vulnerabilities to identify emerging threats, new detection opportunities, and methods to enhance existing vulnerability detection capabilities
A day in the life

- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Bachelor's degree in computer science or equivalent
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP

- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Experience with AWS products and services
- Experience with programming languages such as Python, Java, C++
- Knowledge of data engineering pipelines, cloud solutions, ETL management, databases, visualizations and analytical platforms
- Experience with data engineering concepts including data pipelines, ETL processes, and working with large-scale security datasets

Key job responsibilities-Design, script, and implement quick proof-of-concepts for vulnerability detection, assessment, and remediation across host and container environments, enabling rapid validation of new solutions and approaches
-Collaborate with TPMs and SDE teams to translate program requirements into technical specifications, ensure seamless integration with existing systems, and conduct user acceptance testing for new security capabilities
-Build queries and analyze data to extract actionable insights on vulnerability management effectiveness, supporting data-driven decision making and informed program improvements
-Conduct security research and analysis on emergent vulnerabilities to identify emerging threats, new detection opportunities, and methods to enhance existing vulnerability detection capabilities
A day in the life

- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Bachelor's degree in computer science or equivalent
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP

- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Experience with AWS products and services
- Experience with programming languages such as Python, Java, C++
- Experience with data engineering concepts including data pipelines, ETL processes, and working with large-scale security datasets

Key job responsibilitiesAbout the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance

- 8+ years of specific technology domain areas (e.g. software development, cloud computing, systems engineering, infrastructure, security, networking, data & analytics) experience
- 3+ years of design, implementation, or consulting in applications and infrastructures experience
- 8+ years of IT development or implementation/consulting in the software or Internet industries experience

- 5+ years of infrastructure architecture, database architecture and networking experience
- Experience working with end user or developer communities
- Cloud Technology Certification (such as Solutions Architecture, Cloud Security Professional or Cloud DevOps Engineering)
- Experience communicating across technical and non-technical audiences, including executive level stakeholders or clients

Key job responsibilities
You will lead, manage, and develop multiple teams of Security Engineers and Technical Program Managers responsible for Application Security (AppSec) of Amazon services.You will lead the strategic direction and evolution of Application Security review team/s, including setting goals and establishing priorities.You will develop a healthy and collaborative culture and enable the team to deliver results.You will drive improvements to internal program and process.You will write and deliver high-quality documents for technical and non-technical audiences.You will drive the adoption of security processes, automation, and tooling to improve operational efficiency.
Work/Life BalanceTraining and Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

- 5+ years of managing and developing teams experience
- 5+ years of progressive work within a software security team or related operating environment experience
- Bachelor's degree in Computer Science, Information Security, or a related field
- Knowledge of security of web services, video content protection technologies, cryptography, network security protocols and operating system security
- Experience applying threat modeling or other risk identification techniques or equivalent