Prototype Security Investigator, Prototype Security Investigations
Description
The Amazon Security (AmSec) team is searching for a Security Industry Specialist for its Prototype Security Investigations team who is able to develop, implement and lead security projects and programs to support Amazon's prototype device teams. This position will provide security investigation support to all Amazon consumer electronic devices prior to release to the general public and support the overall prototype investigations posture for the Amazon Devices & Services Organization.
Design and implement investigation frameworks and protocols that meet legal and regulatory requirements
Create and maintain investigation documentation and chain of custody processes that satisfy external audit requirements
Optimize cross-functional processes to improve security-focused projects and goals
Discover and leverage existing solutions to enhance project and process efficiency
Conduct security risk and vulnerability assessments from root cause analysis of lost device investigations
Design and implement mitigation strategies to reduce device losses and intellectual property risks
Handle complex security and compliance programs, managing visible risks and roadblocks
Use expertise to implement straightforward solutions with limited guidance
Establish metrics and reporting to demonstrate effectiveness of security investigation controls
Write reports evaluating and analyzing metrics to support risk-based prioritization of solutions
Key job responsibilities
Investigation Leadership & Execution
Serve as the primary security point of contact and escalation for all prototype investigations within assigned region
Conduct complex investigations into prototype device losses, unauthorized disclosures, and marketplace diversion cases following industry-standard forensic and evidence handling procedures
Partner with Enterprise Protection Program (EPP) and legal teams to ensure investigation methodologies meet evidentiary standards
Program & Process Development
Create and maintain investigation documentation and chain of custody processes that satisfy external audit requirements
Optimize cross-functional processes to improve security-focused projects and goals
Discover and leverage existing solutions to enhance project and process efficiency
Risk Management & Mitigation
Conduct security risk and vulnerability assessments from root cause analysis of lost device investigations
Design and implement mitigation strategies to reduce device losses and intellectual property risks
Handle complex security and compliance programs, managing visible risks and roadblocks
Use expertise to implement straightforward solutions with limited guidance
Establish metrics and reporting to demonstrate effectiveness of security investigation controls
Write reports evaluating and analyzing metrics to support risk-based prioritization of solutions
Training & Development
Lead the development and delivery of security education materials and programs
Mentor junior team members and advise peers on best practices in prototype security
Stay current with industry standards and external practices related to prototype security
Business Partner Management
Work across teams within Amazon Security to influence goals, priorities, and trade-offs
Communicate technical and industry knowledge effectively to engineering, program management, and business teams
A day in the life
Case Review and Prioritization for leak and unauthorized disclosure investigations
Evidence Collection and Analysis
Documentation and Reporting
Collaboration and Communication
About The Team
The Prototype Security Investigations team (PSI) aims to mitigate unauthorized intellectual property (IP) disclosure, prototype device loss and theft, and non-compliance with the Acceptable Use Policy. We reduce risk to Amazon IP, make informed decisions to decrease intellectual property loss, and support regulatory requirements. We identify process gaps and failures and use risk-based prioritization to address issues that pose the highest risk to Amazon’s intellectual property.
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.
Basic Qualifications
Experience in Incident Management, Threat Management, Corporate Investigations, Law Enforcement, Security Operations, Crisis Management or a related field that involves conducting threat assessments, workplace investigations, and/or incident response
Experience in conducting investigative work, including claimant, witness, and target employee interviews, investigative data analysis, and production of investigative documentation
Domestic and international travel may be required (25-35% of time)
3+ years of experience using a case management system and data analysis software to investigate system failures, uncover root causes, and driving resolution
Preferred Qualifications
Leverage Lean Six Sigma Green Belt or Black Belt certification professional certification in information security (SANS GIAC, CISSP, or equivalent)
Experience that includes strong analytical skills, attention to detail, and effective communication abilities
Naturally curious and tenacious to dive deep into issues to get to the root cause of the system failure(s)
Effectively communicate with multiple levels of leadership involving both business and technical sides of the business
Understanding of reading statistics and how data is used to inform policies and procedures
MCFE, CPP, CPI, CISM, or PMP Certification
Los Angeles County Applicants Only
Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies.
Criminal History
Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.
Our Inclusive Culture
Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Benefits
Learn more about our benefits at https://amazon.jobs/en/benefits.