DESCRIPTION

BASIC QUALIFICATIONS

• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Bachelor's degree or above in computer science, engineering, mathematics or equivalent, or experience working in Science, Technology, Engineering, or Mathematics (STEM)
• 4+ years of cloud architecture and solution implementation experience, or US government security clearance of top secret or above
• Experience managing full application stacks from the OS up through custom applications, or experience working with REST API based services and experience with threat modeling and penetration testing
• Experience handling ambiguous or undefined challenges through strong problem solving abilities
• Experience managing conflict, escalations, negotiating compromise, influencing others and problem solving with engineering teams
• Experience communicating across technical and non-technical audiences, including executive level stakeholders or clients

PREFERRED QUALIFICATIONS

• Experience with security in service-oriented architectures/microservices and web services
• Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls
• Experience developing, deploying and managing AI products at scale
• Experience in security or compliance consulting or advisory work in support of a highly technical environment
• Experience designing or architecting (design patterns, reliability and scaling) of new and existing systems
• Experience with compliance & security standards including PCI DSS, ISO 27001, HIPAA, and NIST
• 8+ years as a technical specialist, including 5+ years in secure coding, software development, cloud security engineering or related work;
• Strong programming and scripting skills in Python, TypeScript, Node.js, Go, Java, or .NET.
• Advanced Infrastructure-as-Code proficiency in Terraform, AWS CDK, and/or CloudFormation.
• Expert-level configuration and architectural experience with AWS security and governance services: Config, GuardDuty, Security Hub, Control Tower, Systems Manager, KMS, IAM, VPC, Lambda, CloudTrail, CloudWatch, EventBridge.
• Track record of deploying SCPs and RCPs in multi-account AWS Organizations at enterprise scale.
• Experience writing and deploying reusable policy-as-code patterns (cfn-guard, OPA Rego, Cedar, or equivalent).
• Industry and AWS certifications: CISSP, AWS Solutions Architect Professional, AWS Security Specialty strongly preferred; additional certifications a plus.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.