Expoint - all jobs in one place

מציאת משרת הייטק בחברות הטובות ביותר מעולם לא הייתה קלה יותר

Limitless High-tech career opportunities - Expoint

Amazon Senior Security Risk Specialist GME Games Media & Entertainment 
United States, Texas, Austin 
732584732

10.06.2024
DESCRIPTION


Key job responsibilities
- Manage planned security initiatives for improving security baseline.
- Assess risk and security posture across the organization, using a mixture of data-driven and data-informed approaches.
- Assess and drive improvement of secure cloud configuration posture across a diverse set of services and technologies in the context of Prime Video’s overall architecture.
- Develop repeatable workflows for risk response, technical security analysis and tracking metrics.
- Educate, raise awareness, and drive priority on threats, attacks, vulnerabilities, and countermeasures.A day in the life
As a trusted partner to our software engineering teams, you will work with a network of Software Development Managers and Senior Engineers to drive risk-based prioritization decisions of security work. You’ll help teams put technical security and control findings in context for their service architecture, based on risk, threat, and compliance factors.You’ll communicate with teams, managers and senior leaders 1 on 1, as well across the entire organization, to drive proactive and reactive work. You’ll have an existing tool set to use when you join, and the freedom to develop this going forward in the way that best meets the needs of our engineering teams, and takes our capabilities to the next level.You will interact with a wide range of data sources ranging from inventories, to scanner outputs, and collaborate to improve tooling and outputs with colleagues in teams within Amazon and AWS who own Security Products. With a range of telemetry at your fingertips, you will develop new insights for security and engineering stakeholders, with a constant focus on automating current workflows.Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Work/Life BalanceTraining and Career growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.


PREFERRED QUALIFICATIONS

- Expert knowledge of secure software development lifecycle frameworks.
- Triage of technical security findings ranging from vulnerabilities, to secure cloud control configurations.
- Planning and delivery of large-scale transformation projects.
- Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information Systems Auditor (CISA), or Certified in Risk and Information Systems Control (CRISC).