4 days ago
Base Salary
$178k - $227k/yr
Responsibilities
- Lead security reviews, threat modeling, and architecture assessments to identify risks and guide scalable mitigations.
- Design and build security frameworks, runbooks, and rubrics for emerging security problem domains.
- Partner with product and system owners to design, implement, and validate extensible security controls.
- Evaluate source code and system designs for vulnerabilities and recommend remediation strategies.
- Promote secure engineering practices involving authentication, authorization, and least privilege.
- Analyze incident root causes, recommend preventive controls, communicate security decisions, and mentor engineers.
Requirements
- At least 4 years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks with command-line tools.
- At least 5 years of experience identifying security issues and risks and developing mitigation plans.
- At least 4 years of non-internship experience with scripting, programming, and security code review in common programming languages.
- Knowledge of at least two of Scala, Java, Python, C, C++, or Go.
- Industry experience identifying security vulnerabilities and attack patterns and applying remediation techniques.
- Experience mentoring, serving as a tech lead, or leading an engineering team.
- Preferred: experience with threat modeling or other risk-identification techniques, including equivalent experience.
- Preferred: experience with security in service-oriented architectures, microservices, and web services.
Benefits
- Comprehensive health insurance including medical, dental, vision, and prescription coverage.
- Basic Life and AD&D insurance, supplemental life plan options, employee assistance, mental health support, and a medical advice line.
- Flexible Spending Accounts, adoption and surrogacy reimbursement coverage, 401(k) matching, paid time off, and parental leave.
- Position is located in Arlington, Virginia, United States.
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.