1 day ago
Base Salary
$136k - $184k/yr
Responsibilities
- Conduct security design reviews of new and existing services, including architecture documents, threat models, and system designs.
- Perform threat modeling to identify attack vectors and weaknesses in application architectures.
- Execute or coordinate penetration testing and validate security controls.
- Document, track, communicate, and help remediate security findings while verifying fixes.
- Advise development teams on secure coding, authentication and authorization, cryptography, and data protection.
- Escalate high-severity security issues and maintain documentation of security decisions and risk assessments.
- Use automated security scanning tools and internal security platforms to support reviews.
Requirements
- At least 2 years of non-internship experience with web protocols, common security attacks, and remediation.
- Bachelor's degree in Engineering, Computer Science, or a related field.
- Knowledge of system security vulnerabilities and remediation, including penetration testing and exploit development or equivalent experience.
- Experience in application security architecture, security code reviews, security testing, incident response, or security infrastructure.
- Coding or scripting experience in one or more languages such as Python, C, C++, Java, Ruby, or PowerShell.
- Preferred: experience with AWS or other cloud offerings, application security frameworks, penetration testing, mobile security, cloud security, AI security, identity and access controls, or security infrastructure.
- Preferred: knowledge of web application development, cryptography, public key infrastructure, forensic security, IP security, SSL/TLS, malware, network security, trusted execution, threat intelligence, IoT security, or authentication.
- Preferred: scripting experience with Python, Perl, Bash, or PowerShell and experience triaging security alerts or developing response automation.
Benefits
- Comprehensive benefits include medical, dental, vision, prescription, life and AD&D insurance, supplemental life plans, EAP, mental health support, a medical advice line, flexible spending accounts, adoption and surrogacy reimbursement, 401(k) matching, paid time off, and parental leave.
- Flexible work hours and arrangements are part of the company’s work-life balance culture.
- The role offers training, knowledge-sharing, and career-development resources.
- Compensation may include sign-on payments and restricted stock units in addition to base salary.
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.