Amazon Security Engineer Kuiper Controls Assurance 

United States, Washington, Bellevue 

491187697

Export Control : This position requires that the candidate selected be a U.S. Citizen in order to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed.Key job responsibilities
• Understand and implements ISO 27001, NIST, and other security controls
• Understanding of threat modeling, manual source code review, security vulnerabilities, attacker exploit techniques, and methods for their remediation.
• Assisting certifications and assessments programs by liaising with Kuiper Security, auditors, and Kuiper service teams, articulating control implementation and impact, and documenting procedures
• Establishing credibility and maintaining strong working relationships with groups involved with Information Security and compliance teams (Kuiper Sec, Info Sec, Legal, Internal Audit, Physical Security, Developer Community, Networking, Systems, etc.)
• Identify automation opportunities while working across engineering teams
• Helps drive continuous improvements to the Kuiper compliance program, the program management process, and control implementation projects in coordination with the service teams and Kuiper Security
• Captures and tracks information security metrics and goals for all required controls
• Develop dashboards, canaries, and alarms for all automated controls
• Clearly communicating vision, deliverables, and project status to management and key technical and business stakeholders
• Delivers recommendations and risk interpretations in a clear, concise, and audience-specific formatA day in the life
This is a fast-paced, intellectually challenging position, and will work with leaders in multiple technology areas. Have relentlessly high standards for yourself and everyone you work with, and be constantly looking for ways to improve your product’s performance, quality and cost. We want individuals who are ready for this challenge and want to reach beyond what is possible today.

- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Bachelor's degree in computer science or equivalent
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP

- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Experience with AWS products and services
- Experience with programming languages such as Python, Java, C++