2 days ago
Base Salary
$178k - $227k/yr
Responsibilities
- Lead end-to-end security reviews, design reviews, threat modeling, and penetration-testing scoping for complex services.
- Provide application security architecture guidance and consultation to engineering teams and senior leaders.
- Conduct manual code reviews, identify vulnerabilities, and develop mitigation recommendations.
- Coordinate penetration-testing engagements, analyze results, and drive remediation of security findings.
- Design and build security automation, tooling, self-service guidance, documentation, and readiness frameworks.
- Use generative AI and machine learning to improve vulnerability detection and streamline security review workflows.
- Mentor junior engineers, improve team processes and tooling, and define security metrics and reporting.
- Track security risks, compliance gaps, and remediation progress while escalating critical issues when appropriate.
Requirements
- At least 5 years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks with command-line tools.
- At least 5 years of experience identifying security issues and risks and developing mitigation plans.
- At least 5 years of non-internship experience with scripting, programming, and security code review in common programming languages.
- Knowledge of at least two of Scala, Java, Python, C/C++, or Go.
- Non-internship experience identifying industry-based security vulnerabilities, attack patterns, and remediation techniques.
- Experience as a mentor, tech lead, or engineering team leader.
- Preferred: experience with threat modeling or other risk-identification techniques or equivalent.
- Preferred: experience securing service-oriented architectures, microservices, and web services.
Benefits
- Benefits include medical, dental, vision, prescription, life and AD&D insurance, employee assistance and mental health support, a medical advice line, flexible spending accounts, adoption and surrogacy reimbursement, 401(k) matching, paid time off, and parental leave.
- The position is located in Boston, Massachusetts, United States.
- Amazon notes that the package may include sign-on payments and restricted stock units.
