Amazon Security Review Support Engineer Shipyard 

United States, Virginia 

417075775

Amazon Shipyard operates a device lab in Seattle dedicated to supporting our Global Real Estate and Information Security functions. The Security Review Support Engineer will be lead technical and security reviews for building devices and lead or participate in company-wide user groups to exchange support information, procedures, and best practices. Installing new types of devices, hooking up test equipment, troubleshooting, communicating with vendors, and communicating risks are the key to success in the role. You will own the quality and availability of your work and be expected to hold a high bar for device cybersecurity. A substantial portion of your responsibilities will include documenting systems, security findings, and controls.Key job responsibilities
- Design, set up and maintain test fixtures to verify software on real hardware
- Troubleshoot hardware, software and networking issues
- Contribute to engineering efforts from design to implementation, solving complex technical challenges around developer and engineering productivity and velocity especially as it relates to rapid iteration
- Drive adoption of best practices in secure system design
- Security reviews for hardware including servers and devices.
- Penetration testing & vulnerability research
- Threat modeling.A day in the life- Meeting with business stakeholders to understand their requirements
- Working with vendors to understand their product's security protections
- Setting up test device systems for analysis
- Working with security partners to define and communicate risks
- Ideating and defining emerging threat vectors in the Operational Technology space

- 4+ years of software development, or 4+ years of technical support experience
- Experience scripting in modern program languages
- Experience troubleshooting and debugging technical systems
- Experience in agile/scrum or related collaborative workflow
- Experience troubleshooting and documenting findings
- Experience preparing or conducting information security reviews

- Knowledge of distributed applications/enterprise applications
- Knowledge of UNIX/Linux operating system
- Experience analyzing and troubleshooting RESTful web API calls
- Experience working with OT, ICS, IoT, IIoT, BMS, SCADA, and/or PLCs