Arlington, VA, USA | Herndon, VA, USA
Amazon Security is seeking motivated Security Engineers to join our insider risk organization. We work across Amazon to understand, prevent, and mitigate internal risk. As a Security Engineer on our insider threat prevention team, you will help us identify insider threat prevention opportunities and design innovative solutions to mitigate risk. This position is located in Arlington, VA at our sparkling new Headquarters (we call it HQ2). The team operates in a hybrid working model.
Key job responsibilities
* Use your threat modeling superpowers to identify insider threat mitigation opportunities within Amazon's enterprise-wide technologies
* Query and analyze relevant logs to uncover patterns, develop data-driven options to prevent insider threat activity, and measure success
* Design innovative solutions to prevent insider risk activity at Amazon
* Collaborate with development engineering teams to improve existing technologies and build new technologies to prevent internal threat activity
* Partner with stakeholders like Legal, Human Resources, Privacy, and Information Technology on key initiatives
A day in the life
- Querying large datasets to answer businesses questions or uncover potential risk
- Leading calls with teammates and stakeholders to review options and plans to reduce risk
- Consulting with partner teams to review design and architectures
- Review and improve metrics you use to track the effectiveness of your risk reduction solutions
- Challenging the status quo and helping root cause issues
- Writing and reading Amazon-style documents to drive decision making
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
BASIC QUALIFICATIONS
- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Experience with AWS products and services
- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- 2+ years experience analyzing diverse and large datasets using SQL or other analytical tools
- 2+ years experience in insider threat, counter-espionage, fraud or abuse, or similar domains
PREFERRED QUALIFICATIONS
- Bachelor's degree in computer science or equivalent
- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience implementing security solutions at the business division level or equivalent
- Knowledge of and experience deploying and managing technical controls
- Knowledge of threat landscapes across the technology industry and government entities. Knowledge of the secure software development lifecycle (SDLC)
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.