Amazon Security Engineer AppSec ASSET 

United States, Texas, Austin 

583306051

Key job responsibilities
• Act as the escalation point-of-contact to our internal Amazon customers seeking technical guidance and support in securing applications.
• Be the technical lead to junior security engineers
• Research, develop, and maintain customer-facing documentation, internal runbooks, and Application Security metrics.
• Triage and resolve incoming security support requests, assessing if additional information or escalation is required.
• Leverage scripting and automation skills (Python/AWS) to improve efficiency of organizational processes and tooling.
• Analyze customer feedback to identify trends and determine opportunities for process improvement.
• Perform security review tasks, such as threat modeling, code reviews, architecture diagrams, audits, etc.A day in the life
• Respond to our support ticket queues
• Provide deep dive consultations and security guidance to Amazon builders, security certifiers and partner teams
• Identify and take ownership of systemic issues
• Perform security reviews and review audits of Amazon builder applications
• Develop and improve tools and services to optimize operations and raise the security bar
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance
Hybrid Work
We value innovation and recognize this sometimes requires uninterrupted time to focus. We also value in-person collaboration and time spent face-to-face.

- Experience in one or more of the following domains: access- control system and methodology, network security, application- and system-development security, security architecture and models, cryptography, and operations security
- Experience with at least one modern language such as Java, Python, C++, or C# including object-oriented design
- Knowledge of internet fundamentals and cloud computing concepts

- Knowledge of system, network and OS
- Knowledge of databases, storage and big data concepts