Security Engineer , Ads Security

We’re looking for a Security Engineer who has a broad understanding of proactive security, experience leading security assessments, and the ability to collaborate with product and engineering teams to design secure systems.

About the role

In this role, you will conduct secure design reviews, code reviews, and penetration testing. You’ll develop custom tools and frameworks to assist in proactive security and work with product and engineering teams to build secure and resilient solutions. Your role will be pivotal in ensuring the protection of customer data and critical infrastructure within the Ads organization.

As a Security Engineer within Amazon’s Ads Security team, you will play a crucial role in ensuring that applications across numerous Ads platforms are designed and executed with the highest security standards to maintain customer trust. You will tackle a diverse array of security challenges, ranging from novel attack vectors in Ads services to selecting and implementing scalable and secure features. Additionally, you will serve as a subject matter expert, providing guidance to developers on building secure products and fostering a security-conscious culture within the organization.

Responsibilities

• Conduct threat modeling, code review, and penetration testing to identify security vulnerabilities in advertising applications and infrastructure.
• Contribute to security automation tooling for designing new detections within Amazon’s various security detection frameworks.
• Identify actionable solutions for identified vulnerabilities and collaborate with Ads product and engineering teams to influence and prioritize their resolution.
• Foster a strong security culture at Amazon through knowledge sharing and collaboration.
• Engage in cross-team projects aimed at enhancing the security posture of Amazon and customer data throughout its lifecycle.
• Influence product teams and senior leadership to implement practices that maintain a high security bar.
• Propose, collaborate on, and obtain buy-in for strategic security initiatives.
• Recommend and develop security-focused tools that help product teams prevent security misconfiguration and vulnerabilities at scale.

Qualifications

Basic Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++, or similar object-oriented language.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship).
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command-line tools (non-internship).
• Bachelor’s degree in computer science or equivalent.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security.
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP.
• Experience with AWS products and services.
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing.

About the team

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, and optional supplemental life plans).
• Employee Assistance Program (EAP), Mental Health Support, and Medical Advice Line.
• Flexible Spending Accounts.
• Adoption and Surrogacy Reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.
• Sign-on payments and restricted stock units (RSUs).

Learn more about our benefits at amazon.jobs/en/benefits.

Pay

Base salary range: $159,300 – $212,800 USD annually (USA, NY, New York).