Security Engineer, AWS Vulnerability Management

Amazon Web Services (AWS) Security seeks a passionate and innovative Security Engineer for the AWS Vulnerability Management (AVM) team. At AWS, security is job zero, and our AVM team leads the way in securing our cloud services. We continuously raise the bar for security by blending analytics, cybersecurity skills, and technical expertise to protect our customers and the cloud. We are data-driven, set big goals, and are always challenging ourselves and each other to identify better solutions and take on new challenges.As a Security Engineer, you will interpret and triage vulnerability disclosures, collaborate with AWS experts on technical solutions, and initiate remediation activities across AWS’s vast scale. Your role will involve reviewing and assessing vulnerabilities, diving deep into potential risks, and leveraging your vulnerability management expertise. You'll work closely with service team engineers to understand architectural mitigations and compensating controls, and you'll partner with senior security engineers to review and approve requests.Your impact will be critical in helping AWS maintain top-tier security by balancing risk and service delivery. You'll focus on identifying security trends, enhancing security visibility, and recommending improvements to our security posture. Key job responsibilities- Establishing a risk-based approach to vulnerabilities - Standardizing workflows to streamline remediation efforts - Providing guidance on compensating controls- Collaborating with service teams to address security concerns and remove blockers- Researching the potential impact of software vulnerabilities on AWS and our customers- Collaborating with AWS service teams and partners to remediate or mitigate risks- Authoring risk assessment statements, remediation guidance, audit responses, and status reports- Partnering with product teams across AWS to develop scalable solutions to security problems- Developing tooling to automate and refine vulnerability management processes- Identifying and owning projects that continuously improve proactive security across AWS- Periodic on-call responsibilitiesAbout the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.BASIC QUALIFICATIONS- Bachelor's Degree in Computer Science, Computer Engineering, Information Systems or related degree; or 4+ years equivalent technology experience- 3 years experience in system, network, and/or application security- 3 years experience in threat modeling and interpreting vulnerability disclosures- 2 years experience building automated tools in C, C++, Java, Python, Perl, PowerShell, or Ruby ...

Sr. Security Engineer, SBS - AGI Security

The Amazon Artificial General Intelligence (AGI) organization is focused on building world-class general-purpose intelligence services. Its primary mission involves developing highly autonomous systems through novel model architectures, learning, and inference strategies. The team works on creating a family of new Generative AI models and applications that are efficient and capable.As a Security Engineer within the AGI Security team, you will play a crucial role in ensuring that AGI large language models and applications are designed and executed with the highest security standards to maintain customer trust. You will tackle a diverse array of security challenges, ranging from novel threats in Generative AI to selecting and implementing scalable and secure features such as key management solutions and encrypted storage. You will collaborate with applied scientists, software engineers, security engineers, as well as internal partners and external researchers to develop innovative technologies to solve some of our hardest security problems, and build paved path solutions that builder teams can adopt while building Generative AI models and applications.Key job responsibilities1. Perform threat modeling and ensure adequate security controls are in place for AGI models, applications, and infrastructure2. Influence builders to be better security owners, actively engaging with them to innovate faster and develop scalable mechanisms for upholding the high security bar.3. Create and maintain security documentation, including designs patterns, implementation guides, and secure software development kits (SDKs)4. Simulate Generative AI adversarial attacks and identify vulnerabilities in .5. Contribute to security automation tooling for building new Generative AI detection and tooling capabilities6. Identify actionable and scalable mitigations for identified vulnerabilities, and collaborate with AGI product and engineering teams to influence and prioritize their resolution.7. Mentor builders who aspire to become security advocates & security engineers via 1-1 sessions & office hours.About the teamDiverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training and Career growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. BASIC QUALIFICATIONS- 5+ years of experience with any combination of the following: IAM, Security Engineering, Cryptography, Vulnerability Management, Supply Chain Security, Network security, Threat modelling or Penetration testing.- Expertise in distributed systems security, and fundamental cloud security concepts such as IAM, and cryptography- 5+ years influencing teams (including providing technical direction, coaching and mentoring)- 5+ years of experience communicating technical concepts to a non-technical audience- Strong verbal and written communications skills are a must, as well as the ability to work effectively across internal and external organizations ...

Senior Linux Systems Engineer, AWS Managed Operations (MO) AWSOM Team

Would you enjoy diving deep into, operating, and improving some of the largest software systems humanity has ever built? Do the challenges that come of driving technical, business, and cultural change to improve the reliability, performance, and efficiency excite you?The AWS Managed Operations (MO) organization was founded in April 2023, with the objective to reduce operational load and toil through long-term engineering projects. MO is building the best-in-class engineering and operations team that will own the day-to-day operations for AWS Regions; improving the availability, reliability, latency, performance and efficiency to operate AWS Regions.Amazon is looking for highly motivated Senior Systems Engineers who can balance the day-to-day operations of AWS’ software systems with long-term software engineering to reduce operational toil. We need engineers who enjoy constantly learning and diving deep into the wide range of systems and technologies that make up one of the world’s largest cloud providers.AWS Utility Computing (UC) provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2), to consistently released new product innovations that continue to set AWS’s services and features apart in the industry. As a member of the UC organization, you’ll support the development and management of Compute, Database, Storage, Internet of Things (IoT), Platform, and Productivity Apps services in AWS.10012A day in the lifeDiverse ExperiencesAWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. About AWS Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.Utility Computing (UC)AWS Utility Computing (UC) provides product innovations — from foundational services such as Amazon’s Simple Storage Service (S3) and Amazon Elastic Compute Cloud (EC2), to consistently released new product innovations that continue to set AWS’s services and features apart in the industry. As a member of the UC organization, you’ll support the development and management of Compute, Database, Storage, Internet of Things (Iot), Platform, and Productivity Apps services in AWS.Inclusive Team CultureHere at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.Mentorship & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. About the teamAWS Operations Management (AWSOM) team’s mission is to launch a new offering that will drive security, availability, performance and efficiency improvements to operate AWS Regions globally. We relentlessly remove operational toil through automation to run day-to-day operations at scale. We increase collaboration, bridge development and operations while prioritizing the needs of our customers.AWSOM team’s vision is to own the operational responsibility for all Utility Compute (UC) services in AWS commercial and sovereign regions to free up service teams time to continue innovating quickly for our customers. AWSOM will be responsible for service availability, latency, performance, efficiency, change management and monitoring.AWSOM will also directly influence the experience of our customers through recommending to service teams to build resilience and reliability into the products at the forefront.BASIC QUALIFICATIONS- 8+ years of relevant systems engineering, or systems administration experience using Operating Systems, networking, and storage systems- 5+ years of Systems Engineering, DevOps, Site Reliability Engineering (SRE) or Enterprise Production experience in Windows / Linux or similar environments- 3+ years' experience operating in a 24/7 production environment.- 3+ years experience with a scripting language: Perl, Python, Ruby, PowerShell or similar languages ...

Senior Software Engineer, Stores Security

Amazon Security is seeking a Software Development Engineer III to own the full end-to-end delivery of features responsible for the governance of AWS usage across Amazon's cloud footprint. This team builds and operates highly-scalable and foundational systems for accessing and securing Amazon's cloud workloads. The products built by this team are used across all business verticals in Amazon, giving you the unique opportunity to have company-wide influence. In this role, you will architect and drive the development of scalable software systems to enable effective management, compliance, and security controls over millions of AWS. accounts and resources company-wide. Additionally, you'll have the unique opportunity to partner closely with AWS product teams to drive adoption of their offerings across Amazon and directly influence their roadmaps.Key job responsibilities * Architect and develop systems and processes for operating the largest enterprise multi-account AWS footprint. * Implement preventive controls and guardrails within AWS accounts and AWS Organizations to enforce standardization and prevent policy violations related to security groups, IAM, networking, logging, etc. * Architect for high availability, scalability, observability, and disaster recovery in the context of AWS governance tooling and processes. * Evangelize cloud governance best practices and drive improvements to our multi-account strategy as AWS service offerings evolve. * Collaborate with infrastructure, security, and business teams to translate requirements into scalable technical solutionsAbout the teamABOUT AmSec:Diverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training and Career growthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. BASIC QUALIFICATIONS- 5+ years of non-internship professional software development experience- 5+ years of programming with at least one software programming language experience- 5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience- Experience as a mentor, tech lead or leading an engineering team ...

Systems Development Engineer Intern, Amazon Dedicated Cloud

Amazon Web Services (AWS) internships are full-time (40 hours/week) for 12 consecutive weeks during summer. By applying to this position, your application will be considered for all locations we hire for in the United States.This position requires that the candidate selected be a U.S. citizen and be eligible to obtain and maintain an active TS/SCI security clearance with polygraph. Do you love automating and streamlining manual processes? Systems Development Engineer interns work with technical leaders to refine technical direction, and then follow through with detailed review, designs, and truly innovative code. Systems Development Engineers are “Builders”, developers of unique technology solutions to address business and customer problems. You will build internal and external services within the AWS software systems and be responsible for understanding the operational impact of changes.If this sounds exciting to you - come build the future with us!Key job responsibilitiesCollaborating with experienced Amazonians to design and build innovative products and services.Troubleshooting, researching and resolving problems.Building tools and automation to support the team’s mission.About the teamMentorship & Career GrowthOur team is dedicated to supporting new team members in an environment that celebrates knowledge sharing and mentorship. Projects and tasks are assigned in a way that leverages your strengths and helps you further develop your skillset.Inclusive Team CultureHere at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally. We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences.BASIC QUALIFICATIONS- Are enrolled in a Bachelor's degree or above in Computer Science, Computer Engineering, Data Science, Electrical Engineering, or majors relating to these fields with a graduation date between December 2025 - September 2026- Experience with at least one modern language such as Java, Python, C++, or C# including object-oriented design ...

Security Engineer, Specialized Businesses Security, Vulnerability Management

Amazon’s Specialized Businesses Security team is seeking an innovative Security Engineer to join our Vulnerability Management Dectection Team. In this position, you will focus on detection, assessment, triage and supporting remediation of vulnerabilities. You will work with a diverse set of security scanning tools to support our application security vulnerability detection capabilities. Your goal will be to deeply understand Amazon’s innovative Devices and Services to enhance our vulnerability detection capabilities throughout the Software Development Lifecycle (SDLC). You will partner with development teams to drive prioritization and remediation of vulnerabilities to help deliver secure products for our customers.Key job responsibilities- Developing and tuning custom, open source and third-party high quality automated detection tools (e.g. static analyzers, fuzzers, scanners, etc.) to perform variety of security vulnerability analysis (SAST, DAST, SCA, etc.) - Reviewing output of automated detection tools for accuracy - Analyzing public and private vulnerability disclosures to analyze impact on Amazon Devices and Services- Providing actionable long-term risk prioritization and mitigation guidance to drive security improvements at scale- Proposing mechanisms for integrating security detection tools into the development lifecycle- Collaborate with partners across Amazon to develop scalable solutions to security problemsAbout the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.BASIC QUALIFICATIONS- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security- Bachelor's degree in computer science or equivalent- 3+ years hands-on experience in Vulnerability Management, Product Security and/or Application Security ...

Quality Assurance Engineer, Ring Alarm

Ring is looking for a Software Quality Assurance Engineer to join a team of hands-on, passionate professionals developing innovative products. The person in this position will be responsible for qualifying products and features developed by cross functional teams; developing test plans and test cases mapping to product requirements; documenting end user scenarios; detecting and reporting UI, API, and system wide issues; participating in triaging defects; automating test cases to assist with production release regression testing; and preparing test reports and release readiness reports for components, APIs, and product feature integrations.Key job responsibilities - Work closely with cross functional sprint teams to qualify and prepare to release Ring products and corresponding companion applications (mobile and web apps) - Develop test plans and test cases mapping to product requirements and technical implementations - Prepares and distributes test reports and release readiness reports for stake holder review - Actively contributes to QA support functions - UI and API Automation, triage issues, troubleshoot issues, conduct API tracing, and support production release testingBASIC QUALIFICATIONS- 2+ years of quality assurance engineering experience- Bachelor's degree- Experience in manual testing- Experience in automation testing- Experience in UI and API automation testing (Selenium/SOAPUI) ...

Sr AWS Application Security Engineer

Help us protect not only the Amazon Web Services (AWS) cloud computing environment but all of our customers as well! Since 2006, our great team at AWS has been enabling our customers to bring great ideas to life in ways that aren’t possible in traditional IT environments. With AWS you can flexibly harness compute, storage, security, and other services from across the globe as your business demands them. AWS Security is on the leading edge of many security issues for a wide variety of platforms and technologies including cloud services, Internet of things (IoT), identity and access management, mobile devices, virtualization and custom hardware, all operating at massive scale. Similarly, our highly collaborative team is committed to each team member’s growth as our business grows. AWS Security is looking for a Senior Application Security Engineer to help validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our leading-edge services. A Security Engineer at Amazon is expected to be strong in multiple domains and provide significant contributions to the AWS IT Security team and to multiple groups throughout Amazon. Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. You are also expected to mentor more junior engineers and be a security thought leader for the organization. A Security Engineer must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the AWS IT Security team's work and constantly seek opportunities for process improvement. They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AWS IT Security and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas. A successful candidate will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work. This role will provide career growth opportunities as you gain new security skills in the course of your duties. Responsibilities: * Application security reviews * Penetration testing * Projects and research work as needed * Security training and outreach to internal development teams * Security guidance documentation * Security tool development * Security metrics delivery and improvements * Assistance with recruiting activities and administrative work About the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon SecurityAt Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training and Career growthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.BASIC QUALIFICATIONS- BS in Computer Science or related field, or equivalent work experience.- Minimum of 5 years of experience with any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security.- Minimum of 5 years of experience with security engineering, system and network security, authentication and security protocols, cryptography, or application security. ...

Security Engineer, AWS Cloud Security Response

Security is job zero at AWS. The AWS Cloud Response Team is responsible for the security of AWS Cloud services; operating on the ‘AWS’ side of the Shared Responsibility Model to protect our customers. This role is responsible for Incident Response, requiring engineers to work tactically with both internal and external stakeholders to solve security challenges at massive scale. Engineers will also need to think strategically, to develop and implement changes which drive automation, scalability and continuous progress. This role will provide career growth opportunities as you gain new security skills in the course of your duties.Key job responsibilitiesKey job responsibilities A successful candidate will need a combination of technical and communication skills; with the ability to handle a mix of disparate tasks which may include small-projects in addition to managing incident response activities. • Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritize its remediation in conjunction with the impacted service team.• Communicate the state of these issues to various audiences, both technical and non-technical, at various levels of seniority (up to and including the AWS Chief Information Security Officer).• Participate in efforts to promote security throughout the company and build good working relationships with partner security teams and service teams across Amazon• Demonstrate high capacity for managing priorities appropriately while remaining productive and effective, with tolerance for context switching and interruptions• Escalate issues early and often, expressing a high degree of security judgement when issues are not progressing at the correct pace based on impact to ensure we are putting customers first.• Explore and embrace the Amazon builder culture, identifying mechanisms and methods to improve tools and processes to simplify and drive issues at the scale and speed necessary to benefit our global team of engineers.• Fulfill regular on-call responsibilities during the team's working hours and in support of the global team's on-call weekend rotationA day in the lifeThis position supports AWS with security operations and incident response activities. You will be responsible for coordinating and facilitating security response activities for all AWS products and services. You will drive security related issues to resolution across numerous service teams, interacting directly with those teams and other AWS Security engineers.About the teamCloud Response is a team inside AWS Security Operations. This team is broadly responsible for the 'AWS' side of the Shared Responsibility Model, and provides oversight of security issues from their identification through to resolution. Cloud Response operates follow-the-sun with teams based around four different geographical locations.We work with AWS security and service teams to ensure security issues are addressed and resolved with the right level of urgency, while keeping our key stakeholders informed and engaged as necessary throughout the issue lifecycle. Diverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.BASIC QUALIFICATIONS- Bachelor's degree in engineering, cybersecurity, or 4+ years equivalent professional experience.- 3+ years of experience on a Security Operations team, coordinating responses to security events which involve multiple teams across an organization, and programmatically preventing recurrence.- 2+ years or more of demonstrated experience with a focus in areas such as systems, network, and/or application security.- Understanding of best practices across multiple security disciplines/domains. ...

Sr. Security Engineer, Hardware Security Research, InfraSec-HLS

Do you enjoy reading source code to find security issues? Are you passionate about crafting fuzzers and writing proof-of-concept code to demonstrate vulnerabilities? Do you thrive on diving into black-boxes and uncovering security issues? The Infrastructure Security - Threat team does exactly this, combining manual code analysis, advanced fuzzing techniques, and black-box testing to secure the global AWS infrastructureOur team is responsible for the automated fuzzing assessments of all network devices, products, services, software and firmware released by infrastructure product teams. We specialize in digging deep to find security issues that static analyzers can’t, and write tooling and code to identify such issues at scale. The AWS infrastructure is foundational to all AWS services, so if you love working below the HTTP APIs on network layers, firmware level or operating system internals, this role could be a great fit. On this team you will be reading and manually reviewing source code in C, C++, Java, go-lang, Python, JavaScript, Rust, and other languages to look for security bugs. At times, you may not have the source code and will need to black box test for security issues. You’ll be writing proof-of-concept (PoC) code to clearly demonstrate the impact of an issue. You will also be retesting and validating fixes to security issues discovered, as well as figuring out new ways to break the fixes themselves. Key job responsibilities- Manually audit the source code of infrastructure services and software authored in-house by Amazon- Audit the security risk of various builds of vendor-provided hardware and software to find security flaws in it as a black-box- Develop fuzz test harnesses leveraging tools like AFL++, LibFuzzer and honggfuzz to discover vulnerabilities in infrastructure software- Write proof-of-concept code to demonstrate the severity of a potential security issue - Provide clear communication on security issues to developers and network engineers that help in understanding the issue and testing the fix - Partner with AWS developers to drive improvement in application security as a result of security review engagements - Provide actionable long term risk mitigation guidance - Work directly with Principal, Senior Principal and Distinguished Engineers to assess high risk attack surfaces to AWS infrastructure- Present risk assessment reports and demonstrations to Directors and VPsA day in the life- Validate the security of a new device being introduced into the AWS data center - Verify the code fixes made to address security issues - Write proof-of-concept code to demonstrate the impact of a security issue - Assess whether a publicly-disclosed issue is impacting AWS software or firmware components - Ensure high security of vendor-provided hardware (such as whether there are security flaws in its boot process, etc.) - Perform penetration tests on yet-to-be-released software ensuring it meets security requirements early-on during the development phases by collaborating with AWS engineersAbout the teamWithin AWS, the Infrastructure Security – Threat team is responsible for device security (threat modeling, shift-left security), fuzzing and penetration testing of AWS Infrastructure. InfraSec-Threat is part of the Infrastructure Security organization responsible for threat intelligence, vulnerability management, security information and event management (SIEM), incident response, and overall security across the global AWS infrastructure. We value work/life balance and plan well so we can be creative in our work as well as our lives. We value inclusion and diversity because we know diversity brings in creativity. BASIC QUALIFICATIONS- CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ ...

Senior Assurance Manager, Denied Party Screening

We are open to hiring candidates to work out of one of the following locations:Seattle, WA, USAAmazon is seeking an Senior Assurance Manager to join our Denied Party Screening (DPS) team focused on denied party and sanctions screening systems and processes. This team enables Amazon to comply with regulations as well as understand and manage sanctions risk.We are seeking a candidate that has good analytical skills, solid business judgment, a controllership focus, and the capability to drive the right results with a focused and pragmatic approach. You are an effective project manager that plans and conducts assurance assessment and testing from beginning to end, and often managing multiple projects at once. You will be responsible for prioritizing findings and recommendations in tune with our corporate strategy and regulations. You should be able to facilitate multiple stakeholders to agree on appropriate solutions and verify that risks are mitigated appropriately. You will also provide subject matter expertise and guidance to cross-functional teams on sanctions compliance obligations and risk mitigation strategies. We value personality, insight, intellectual flexibility, and sound business judgment. We value your passion to discover, invent, simplify and build.Key job responsibilitiesAs a Senior Assurance Manager, you will: • Support the development and execution of a comprehensive sanctions compliance assurance program. • Lead the planning, scoping, execution, and reporting of assurance activities based on identified compliance risks impacting various Amazon businesses. • Design and implement robust testing frameworks to validate the effectiveness of sanctions screening processes, procedures, and controls. • Analyze and perform deep dives of sanctions-related data to assess control effectiveness and detect potential control gaps. • Partner closely with the stakeholders, legal, and business teams to identify risks and gaps and drive remediation actions. • Define and improve processes, tools, and drive automation to support end-to-end assurance program. • Provide consultative support to business partners to identify opportunities for control improvements with the objective of mitigating risk and improving compliance and operational performance. • Use excellent writing skills to succinctly communicate complicated issues, risks and remediation efforts. You will prepare reports, make presentations to senior level management to improve controls with the objective of mitigating compliance risks. • Work independently and remain flexible, with the ability to prioritize workloads and maintain a resilient attention to detail in a fast-paced environment.About the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical storesInclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.BASIC QUALIFICATIONS- 6+ years of compliance, audit or risk management experience- Bachelor's degree or equivalent ...

Senior System Development Engineer, Hardware Engineering Services

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help. You’ll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You’ll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you’ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.Come work on Amazon Web Services (AWS) Outposts; a highly recognized hybrid cloud offering from AWS. AWS Outposts is an on-premises version of AWS public cloud. To learn more about Outposts, you can visit: https://aws.amazon.com/outposts/ We are a start-up like team within a big enterprise. This allows us to take risk and experiment, allow team members to flex their technical muscles and grow in their respective careers, and an unique opportunity to be part of the product's growth story. Are you interested in building high performant hardware used to run the largest cloud computing infrastructures in the world, and managing systems at scale? If yes, come join us.Key job responsibilitiesYou will be part of a team that solves systemic issues, drives changes back into development and builds mechanisms to scale and efficiently operate our infrastructure at the Edge. As a member of the AWS Hardware team, you will work with other subject matter experts in compute, memory, storage technologies to develop and deliver the best customer experience in cloud computing.We aim to hire engineers who will thrive in a fast-paced, collaborative and open environment, who aren't afraid to dive-deep to solve seemingly impossible challenges, who want to build rock solid never-fail, highly-secure hardware at world-class scale and who obsess over customers.A day in the lifeLead the Hardware Engineering (HWEng) System Development (SysDE) effort to define and build software and enabling tools, according to defined HWEng Software development best practices; Track and report progress. Work across internal HWEng teams, to ensure drive chosen for new Edge and Outpost delivers performance, reliability and operational health needed by the EC2, Networking and Outpost platforms. Work closely with internal customers to identify early any potential problems with on-boarding new Edge and Outpost server into their ecosystem. Build, manage, and deploy pipelines for rapid deployment of new code changes to a variety of org-owned and customer-owned systems. Build monitoring tools and metrics to ensure hardware is running properly in both test and production environments. In addition, you will:- Partner with Hardware Design Engineers and Software Engineer undertake sustaining and root cause analysis of complex issues. - Interact with cross functional engineering teams across the company. Solves complex technical problems and architecture problem at the team level. - Dive into and take ownership for critical design issues.- Participate in design reviews.- Address all aspects of technology readiness, including system design, tests and fleet deployment.- Help build robust methodology and processes to deliver technology to productsAbout the teamThe team is comprised of both Hardware Design Engineers, System Design Engineers, Software Development Engineers and Technical Program Managers, all with the common goal of delivering the best specialized server fleet possible to our customers.*Why AWS*Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.*Diverse Experiences*Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.*Work/Life Balance*We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud.*Inclusive Team Culture*Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.*Mentorship and Career Growth*We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.BASIC QUALIFICATIONS- 6+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby experience- 6+ years of non-internship professional software development experience- 6+ years of deploying and operating in a Linux/Unix environment experience- 5+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience- 5+ years of systems design, software development, operations, automation, and process improvement experience.- Experience with x86 architecture, as well as ARM, and FPGA devices- Experience with modern technology devices in storage, network, memory as well as a variety of interface standards and protocols (I2C, IPMI, SPI, PCIe)- Excellent problem solving skills; ability to invent and simplify- BS degree in Computer Science, Computer Engineering, or other technical degree, or relevant work experience ...

Security Engineer II, Ads Security

The Ads Security organization at Amazon is dedicated to creating innovative technical solutions that detect, assess, and mitigate security risks within Amazon’s Advertising businesses. Our vision is to accelerate the development velocity of the Advertising business by ensuring that our products are inherently secure. We are seeking a talented engineer to join our team, where you will have the opportunity to contribute to securing web applications and services critical to delivering exceptional customer and partner experiences at scale in Amazon Ads.The ideal candidate will have a robust background in security program management, experience in establishing security standards for cross-cloud deployments, and a deep understanding of cloud security, particularly within AWS platforms. You will conduct independent security reviews, oversee penetration tests as necessary, and provide guidance to stakeholders on remediation strategies and best practices for integrating security into their application platforms. Your role will be pivotal in ensuring the protection of customer data and critical infrastructure within the Ads organization.Key job responsibilitiesAs a Security Engineer within Amazon’s Ads Security team, you will play a crucial role in ensuring that applications across numerous Ads platforms are designed and executed with the highest security standards to maintain customer trust. You will tackle a diverse array of security challenges, ranging from novel threats in Ads services to selecting and implementing scalable and secure features such as key management solutions and encrypted storage. Additionally, you will serve as a subject matter expert, providing guidance to developers on building secure products and fostering a security-conscious culture within the organization.* Collaborate directly with service and platform owners to advise on security best practices and tool implementation.* Perform comprehensive security assessments on SaaS implementations, data management systems, and reporting frameworks being used internally by Amazon Ads teams or externally by Amazon Ads customers.* Coordinate and oversee penetration testing activities for platforms and tools.* Identify security risks, report findings, and recommend solutions for complex security issues by leveraging existing set of detections and/or design new detections within Amazon’s various security detection frameworks.* Contribute to fostering a strong security culture at Amazon through knowledge sharing and collaboration.* Engage in cross-team projects aimed at enhancing the security posture of Amazon and customer data throughout its lifecycle.A day in the lifeActivities in this role include:• Identifying security issues and risks, review & approve mitigation plans for Ads products.• Influencing product teams and senior leadership to implement practices that maintain a high security bar.• Advising teams developing products on the correct components that deliver security features like key management, authentication, encryption, etc.• Proposing, collaborating & obtaining buy-in on strategic security initiatives.• Recommending and developing security-focused tools that help product teams prevent security misconfigurations & vulnerabilities in the design & implementation of features.• Developing and interpreting security policies and procedures to form security requirements.• Developing training that promotes general security awareness and informs developers on how to discover & mitigate security vulnerabilities in their products.• Deciding which new security tooling and strategies should be pursued for scalable security in service development.• Supporting incident response activities as a security subject matter expert.About the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.BASIC QUALIFICATIONS- Bachelor's degree in computer science or equivalent- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience- 5+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience- Experience implementing security solutions at the business division level or equivalent ...

Sr. System Development Engineer, Hardware Engineering

AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help. You’ll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You’ll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you’ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.The AWS Hardware Engineering team creates server designs for Amazon’s innovative web services. Our designs are industry-leading in frugality and operational excellence, and are critical to the success of the AWS business and the more than one million customers who use AWS today. Our engineers solve challenging technology problems, and build architecturally sound, high-quality components to enable AWS to realize critical business strategies. The ideal candidate for this role will have a proven track record of rapidly coming up to speed on new engineering disciplines, making impactful decisions within that space, and have experience gluing together components written by more specialized engineers to create a cohesive, well-running engineering product. AWS Engineers are shaping the way people use computers and designing the future of cloud computing technology – come help us make history! What you will do: You will be a member of the HWEng Storage Drives team and will interact with engineers across the company to lead and develop automation and infrastructure capabilities to improve OEM drive operational health, qualification and integration across all of AWS storage server platforms. Key Responsibilities for this position include authoring requirements specifications, system design, and development, all while testing at each phase. There are two main areas of focus for this position: software test development and integration to enable storage hardware, and system debugging for production hosts. Why it matters: Public cloud IT services represent the majority of growth in the overall IT services market and will continue to do so for several years to come. The scale of AWS, combined with an understanding of how our hardware is used, creates a unique opportunity for component customization that will directly benefit customers. Why you will love it: You will work with engineers across the company to build next-generation storage servers. You will have a direct impact on our bottom line and the ability to deliver improvements for our developers. You will be part of a growing, fast paced, and fun team. You will have ownership for the implementation of your work. You will see direct product improvements based on the results of your work.Key job responsibilities- Must have leadership experience developing automation software, spanning across multiple teams and multiple organizations. - Must have experience designing and building system-level software at scale, with an emphasis on durability, availability, security, and diagnostics.- Must have a strong understanding of OS internals, most notably storage subsystems in a Linux-based environment.- Must have demonstrated experience with building and troubleshooting device drivers for Linux on ARM and x86.- Must have demonstrated experience debugging Linux boot and runtime problems on ARM and x86.- Must have demonstrated experience developing tools to perform testing running on Linux-based systems- Must have experience hands on development of automation software in at least one modern language, such as Python, Ruby, Java, or others.- Desirable to have an understanding of AWS services, specifically, distributed storage systems and use of storage hardware- Desirable to have an understanding of drive (HDD, SSD) technologyA day in the lifeLead the Hardware Engineering (HWEng) System Development (SysDE) effort to define and build software and enabling tools, according to defined HWEng Software development best practices; Track and report progress. Work across internal HWEng teams, to ensure drive chosen for new storage hardware delivers performance, reliability and operational health needed by the EC2, EBS, and S3 platforms. Work closely with internal customers to identify early any potential problems with on-boarding new storage servers into their ecosystem. Build, manage, and deploy pipelines for rapid deployment of new code changes to a variety of org-owned and customer-owned systems. Build monitoring tools and metrics to ensure hardware is running properly in both test and production environments.About the teamSystem Development Engineers in AWS Hardware Engineering wear many hats. From orchestration tooling development, to hardware integration, to kernel driver debugging, we dive deep into problems across the breadth of AWS. The ideal candidate will have a proven track record of rapidly coming up to speed on new engineering disciplines, making impactful decisions within that space, and have experience gluing together components written by more specialized engineers to create a cohesive, well-running engineering product.Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. BASIC QUALIFICATIONS- 6+ years of deploying and operating in a Linux/Unix environment experience- 5+ years of programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby experience- 5+ years of non-internship professional software development experience- 3+ years of designing or architecting (design patterns, reliability and scaling) of new and existing systems experience- 3+ years of systems design, software development, operations, automation, and process improvement experience- Experience leading the design, build and deployment of complex and performant (reliable and scalable) software solutions in production ...

Security Engineer - Hardware, Firmware, Virtualization, Secure Hardware And Foundational Technologies Team

Help us protect not only the Amazon Security (AmSec) cloud computing environment but all of our customers as well! Since 2006, our great team at AmSec has been enabling our customers to bring great ideas to life in ways that aren’t possible in traditional IT environments. With AmSec you can flexibly harness compute, storage, security, and other services from across the globe as your business demands them.Amazon Security is on the cutting edge of many security issues for a wide variety of platforms and technologies including cloud services, Internet of things (IoT), identity and access management, mobile devices, virtualization and custom hardware, all operating at massive scale. Similarly, our highly collaborative team is committed to each team member’s growth as our business grows.As a part of the Secure Hardware and Foundational Technologies group, we help Amazon launch brand new products and invest in emerging technologies securely. We are looking for a technically deep Senior Security Engineer to help secure our foundational platforms such as OS kernels, virtualization, device emulation, firmware and hardware. You will be responsible for conducting security reviews, threat modeling, developing tooling that will help detect security issues at scale and hands-on security evaluations (pen-testing).The successful candidate must be comfortable diving into complex engineering discussions, and leveraging deep security expertise to ensure proper risk assessment and threat analysis is performed. You will provide crystal-clear technical direction and risk mitigation guidance for diverse engineering and business leaders at all levels.By applying your hard-earned years of practical security engineering expertise in projects related to enterprise networking, hardware-rooted security, operating system hardening, and cloud-scale administrative infrastructure, you will literally shape the future of cloud computing.You are expected to be strong in multiple domains and provide significant contributions to the IT Security team and to multiple groups throughout AmSec. Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. You are also expected to mentor more junior engineers and be a security thought leader for the organization.You should foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the IT Security team's work and constantly seek opportunities for process improvement. They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AmSec and by groups throughout Amazon), while having an understanding of the application of information security in a broad range of technical areas.You will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work. This role will provide career growth opportunities as you gain new security skills in the course of your duties.Key job responsibilities- Security reviews for hardware including servers and devices- Penetration testing & vulnerability research- Threat modeling- Security training and outreach to internal development teams- Security guidance documentation- Assistance with recruiting activitiesAbout the teamAbout Amazon SecurityDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.BASIC QUALIFICATIONS- BS in Computer Science or related field, or equivalent work experience- 5+ years of experience in Security Engineering or Development of Security capabilities, supporting engineering projects from concept to delivery, and 2 years in two or more of the following technical categories: Virtualization security (Xen, KVM, QEMU) - Hardware security (PCB, JTAG, UART, SPI, ROM, microcode, custom ASIC/FPGA) - x86 and/or ARM chipset and firmware security (TPM, UEFI, TrustZone, Secure Boot, JTAG, PCIe) - Physical security testing at the machine level- Security testing of compute platforms (Server, PC or Mobile) - Working with diverse physical tamper resistance and/or tamper detection techniques ...

Security Engineer II, Identity, Security and Abuse Prevention

Are you interested in helping ensure exceptional services and security for customers? Do you have a passion for architecture, security, software design, and innovative technologies? The Identity and Security Abuse Prevention team within Worldwide Operations Security is looking for a hands on security engineer. The ideal candidate is interested in diving deep into a variety of complex, interrelated identity architectures to ensure secure practices and policies are upheld. You will support the planning, scoping, execution, and reporting of security efforts based on identified risks. Assessment scope may include identity and access management, key management, data security/privacy, service monitoring, release management, and service availability.You will bring independent and objective points of view to provide support to our services to identify opportunities for control improvements to mitigate risks, ensure compliance and improve operational performance. In this capacity, you will gain valuable exposure to many areas of our global business.This position will challenge your current understanding of Amazon services. You will have the ability to learn new technology concepts quickly. You are someone who is curious and known for diving deep into subject matter, taking ownership, and encouraging innovative and pragmatic solutions to complex problems. In addition, you will have solid business judgment, the ability to gain trust and respect of business leaders, and the capability to guide a fast-paced organization to the right results.Key job responsibilities- Acting as subject matter expert on risk-based security reviews and assessments at scale - Collecting/reviewing data from multiple sources to assess service security posture- Building, evolving, and improving sustainable processes and measurement systems to ensure that security policy requirements are maintained. - Provide security design for products and services to enable effective Identity and Access Management throughout World Wide Operations - Enforce compliance with IAM principals including: least privilege access, password management, Audit logging, RBAC, certificate issuance and revocation, and AAA solutions. - Understand the Amazon identity management ecosystem holistically and identify existing services and capabilities that may solve existing problems.- Oversee and review the security architecture of password management, user account lifecycle, certificate management and system authentication solutions within operations - Engage with and influence the many stakeholders across WWOps to ensure compliance, security and operational functional requirements are met or exceeded - Create and implement automated processes that reduce manual efforts and increase overall efficiency and scalability - Develop monitoring and reporting on the health, effectiveness and efficiency of IAM services- Improve the efficiency and scalability of operational systems and processes to accommodate the rapid growth of usersAbout the teamDiverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training and Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. BASIC QUALIFICATIONS- Bachelor's degree in computer science or equivalent- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience- Knowledge of networking protocols such as HTTP, DNS and TCP/IP- Detailed knowledge of Identity and Access Management Protocols such as SAML, Oauth, OIDC, and FIDO ...

Support Engineer II, Vendor Funding

Ever wondered how Amazon offers the earth’s biggest selection and still manages to offer lower prices every day to our customers? The Vendor Funding team creates the systems to drive costs lower. Given the rapid growth of our business we apply cutting edge technology to complex business problems.Vendor Funding team in Amazon is looking for talented support engineers to help with large-scale systems processing billions of transactions supporting Amazon vendors. Vendor funding is essential for Amazon's continued profitability and growth. This job would provide opportunities to grow technical skills as well as gain business awareness while supporting the systems.Key job responsibilities- Provide support of incoming tickets, including extensive troubleshooting tasks, with responsibilities covering multiple products, features and services- Work on operations and maintenance driven coding projects, primarily in Java - Software deployment support in staging and production environments- Develop tools to aid operations and maintenance- Work with engineering team for taking over active support issues and creating a team specific knowledge base and skill setBASIC QUALIFICATIONS- 2+ years of software development, or 2+ years of technical support experience- Experience troubleshooting and debugging technical systems- Bachelor's degree- Experience programming with at least one modern language such as Java, C++, or C# including object-oriented design- Experience in Unix ...

Senior Systems Engineer, Robotic Storage Tech, Amazon Robotics Robotic Storage Technology

Are you inspired by invention? Is problem solving through teamwork in your DNA? Do you like the idea of seeing how your work impacts the bigger picture? Answer yes to any of these and you’ll fit right in here at Amazon Robotics (AR). We are a smart team of doers that work passionately to apply pioneering advances in robotics and software to solve real-world problems that will transform our customers’ experiences in ways we can’t even imagine yet. We invent new improvements every day. We are Amazon Robotics and we will give you the tools and guidance that you need to invent with us in ways that are rewarding, fulfilling and fun.The Robot Storage Tech teams remit includes ensuring the successful launch of Amazon Robotic storage systems worldwide by managing the design-to-implementation process of system solutions. We are looking for a Senior Interdisciplinary Systems Engineer to join a dynamic team that provides direction for concept development, architecture, and design of robotics systems and industrial equipment.Key job responsibilities- Define, expand, and explore the design space for complex, multidisciplinary robotics and automation problems- Identify and inspect the cross-functional tradeoffs between design alternatives, including impact on performance, schedule, cost, risk, complexity, and scale- Break down and frame problems using con-ops, use cases, structural/functional decompositions, and other system representations to clarify needs and align technical teams- Identify design choices to ensure our products are safe, reliable, and usable, and can be deployed and supported at Amazon scale- Build quantitative models and analyses (Excel, MATLAB, Python, internal tools) to conduct trade studies, refine requirements, and grasp key system drivers across the integrated systems of systems- Perform technical risk assessments (such as TRL, Gap Analysis, FMEDA, HARA, etc.), devise mitigation plans, and create system test strategies- Develop and communicate system integration and evaluation strategies and plans that aide program learning, technical risk reduction, verification, and validation- Drive and prioritize execution of system test campaigns that span lab and field testing environments in partnership with subsystem development and test teams (test readiness reviews, test execution, post-test analysis and reporting)- Mentor junior engineers in engineering best practices, and participate in hiring of new team membersA day in the lifeAmazon offers a full range of benefits that support you and eligible family members, including domestic partners. Benefits can vary by location, the number of regularly scheduled hours you work, length of employment, and job status such as seasonal or temporary employment. The benefits that generally apply to regular, full-time employees include:1. Medical, Dental, and Vision Coverage2. Maternity and Parental Leave Options3. Paid Time Off (PTO)4. 401(k) PlanIf you are not sure that every qualification on the list above describes you exactly, we'd still love to hear from you! At Amazon, we value people with unique backgrounds, experiences, and skillsets. If you’re passionate about this role and want to make an impact on a global scale, please apply!BASIC QUALIFICATIONS- Experience with eliciting and clarifying business and end user needs, and linking those needs to system concepts, requirements, and designs- Significant depth and breadth of technical expertise to lead technical collaboration across diverse groups (e.g. hardware engineering, software engineering, program management)- Experience coordinating and/or leading design teams to establish design goals, balancing business and technical trade-offs- Experience identifying and analyzing dependencies, tradeoffs, and sensitivities across multi-disciplinary systems- BS or equivalent in Engineering, Systems Engineering, Operations Research, or another STEM discipline ...

Senior Optical Network Development Engineer, Network Product Development - Optics

Do you like to use network and Unix systems engineering to deliver simple, sustainable, and repeatable solutions? Would you like to play a key role in driving the stability and sustainability of next-generation IP networks?AWS Infrastructure Services owns the design, planning, delivery, and operation of all AWS global infrastructure. In other words, we’re the people who keep the cloud running. We support all AWS data centers and all of the servers, storage, networking, power, and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems, with thousands of variables impacting the supply chain — and we’re looking for talented people who want to help. You’ll join a diverse team of software, hardware, and network engineers, supply chain specialists, security experts, operations managers, and other vital roles. You’ll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And you’ll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.The Core Networking team is looking for a Sr. Optical Network Development Engineer to join our Network Product Development (NPD) team. As a Sr. Optical Network Development Engineer, you will be responsible for building, deploying and scaling the Amazon networks that support AWS, customers, and other business units, across multiple global data centers. AWS Core Networking is focused on building Data Centers and the network that allows Data Centers to function efficiently. They own the solutions that allow racks to be aggregated and Data Centers to be interconnected. Core Networking’s goal is to balance efficiency, performance and reliability to allow customers access to their applications and data. Key job responsibilitiesOptical Network Development Engineers perform high quality network and/or systems operations, deployments, scaling, technology refresh, sustaining engineering, best practices application, optimization, internal/external customer interactions, and produce appropriate technical documentation.• Collaborate with vendors/manufacturers to evaluate new hardware and software features. Create implementations plans for incorporating them into the network.• Automate optical test plans and qualify optical modules.• Collaborate with vendors/manufactures in defining and developing test plans for Optical Modules.• Work with network operations team in identifying operation issues and improving quality and RMA process. A day in the lifeOn an everyday basis as part of our team, you have the unique opportunity to understand the growing AWS network and our internal customers’ requirement on interconnect solutions. You'll work backwards to devise hardware solutions by influencing the broad industry and/or to develop software tools with sister teams to maintain a highly available network that delights AWS customers. You design and implement processes and mechanisms that both help the team to deliver business impact to the organization in a systemic way, while also helping to raise the bar on our operational excellence. Operating at the scale we do, there is no blueprint for how to do what we do, which encourages our engineers to identify and develop simple solutions to complex problems. We encourage durable solutions that look around corners while taking into consideration our customer needs from a cost, performance, and reliability perspective. We work closely with our internal partners that design, build and operate the network to ensure that our solutions meet their needs and exceed their expectations.About the teamWithin AWS Networking the NPD (Network Product Development) organization is responsible for, designing the hardware, building the software, and owning the interconnects for the routers that power the global AWS network. Beyond product delivery we actively manage the fleet or routers in a network that grows by 70% annually. This means tracking key business and operational metrics to ensure that we operate smoothly and minimize or eliminate customer impact due to device related issues for a transparent AWS customer experience.Working at AWS in the Core Networking Team - Meet Matt, Director, Core Networking -- LinkMeet Kensie, Network Development Engineer -- Link About AWSDiverse ExperiencesAWS values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS?Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.Inclusive Team CultureHere at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness.Mentorship & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. EEO/AccommodationsAWS is committed to a diverse and inclusive workplace to deliver the best results for our customers. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status; we celebrate the diverse ways we work. For individuals with disabilities who would like to request an accommodation, please let us know and we will connect you to our accommodation team. You may also reach them directly by visiting please https://www.amazon.jobs/en/disability/us.BASIC QUALIFICATIONS- Bachelor’s degree in Electrical/Electronic Engineering, Physics, Computer Engineering or equivalent worked experience.- 8+ years of work experience on optical communication systems or components.- • 8+ years of experience with optical transceivers and IEEE standards.- 4+ years of experience developing test scripts for optics validation and characterization.- 2+ years of experience working with optical and networking merchant silicon suppliers, manufacturing processes, and qualifications.- 1+ years of professional development experience with Python or a similar scripting language for automation scripting. ...

System Development Engineer II, Ops Tech Solutions

Operations Technology Solutions (OTS) at Amazon is at the forefront of creating, securing, and maintaining advanced technical infrastructure and devices. These innovations span across Amazon's diverse landscape, including Fulfillment Centers, Transportation, Logistics, Specialty Fulfillment, Air, and Pharmacy sectors. Our skilled operators count on OTS to test, certify, deploy, and sustain state-of-the-art network solutions and end-user equipment at approximately 2,500 global sites where Amazon thrives. Committed to exceeding customer expectations, OTS ensures a secure and reliable infrastructure through its extensive network of over 4,000 field technicians and engineers. These professionals are vital in managing the daily operations and growth of Amazon's vast fulfillment and logistics network.Key job responsibilitiesYou design and deliver technology solutions which solve difficult business problems. You identify and solve ambiguous problems, architectural deficiencies, or areas where your team’s systems hinder the success or innovation of other teams.You work autonomously, but may seek direction at times from peers and your manager. You consider the legacy of the systems you build with your team and how they will scale and evolve over time. Your solutions are pragmatic, efficient, and cost-effective. You make appropriate trade-offs and re-use or extend prior work where possible. You thoroughly test your work. You consistently write clear, accurate, and concise documentation for your own solutions and improve your team’s existing documentation.A day in the life* Work closely with Product Management to break down feature requirements into software deliverables* Design, Develop and maintain secure and performant software features and systems for Operations and Operations IT customers* Actively participate in software and system design reviews* Participate in the team on-call rotation where you will triage, communicate status, escalate, and remediate critical issues quicklyAmazon offers a full range of benefits that support you and eligible family members, including domestic partners and their children. Benefits can vary by location, the number of regularly scheduled hours you work, length of employment, and job status such as seasonal or temporary employment. The benefits that generally apply to regular, full-time employees include: - Medical, Dental, and Vision Coverage - Maternity and Parental Leave Options - Paid Time Off (PTO) - 401(k) Plan If you are not sure that every qualification on the list above describes you exactly, we'd still love to hear from you! At Amazon, we value people with unique backgrounds, experiences, and skillsets. If you’re passionate about this role and want to make an impact on a global scale, please apply!About the team* Our customer is the business. We obsess over the end user experience, but we build our strategy based on the business's requirements* We provide solutions to our customers initiatives, not barriers. However, we cannot allow them to make poor decisions, especially in employee safety and information security* We have a requirement for "zero-touch" deployment and support for all operational technology* Our organization is an incubator for Amazon tech talent. We encourage and celebrate upward and lateral movement internally and externally for our talentBASIC QUALIFICATIONS- Experience designing or architecting (design patterns, reliability and scaling) of new and existing systems- Experience programming with at least one modern language such as C++, C#, Java, Python, Golang, PowerShell, Ruby- Experience building services using AWS products- Experience utilizing AWS cloud solutions in a DevOps environment- Experience working in an Agile environment ...