Security Engineer II, Infrastructure Security Identity

About the role

The Infrastructure Identity Security Team is responsible for the security and risk management of the AWS Network Infrastructure. We build systems that detect, assess, and mitigate risk across the global infrastructure and are accountable for keeping the Amazon Infrastructure secure and compliant with customer requirements.

Responsibilities

• Aid in the development, assessment, and analysis of security outcomes for AWS Infrastructure Identity Team.
• Support the development teams as the security subject matter expert.
• Identify and drive mitigation of security risks through formal, deep dive assessment activities.
• Lead in the identification and application of remediation and mitigation techniques, including the development of monitoring and reporting capabilities.
• Shape the future in network security through automation.
• Continuously assess the effectiveness of network security controls and processes.
• Work alongside software engineers to deliver best in class tools for Identity customers.
• Codify intentions that define security of traffic flows and maintain them through assessments.
• Deliver empirical solutions for programs which cross organizational boundaries.
• Research and recommend optimizations of new and existing network security architecture.
• Work alongside with software engineers on the design and requirements of security software.
• Identify network security risks and participate in resolution.
• Create documentation for operational procedures and user education.
• Mentor junior staff and participate in interviewing as the subject matter expert on network security.

Requirements

We are seeking engineers with subject matter expertise in network security and software systems, specifically with access controls in large, segmented networks. We value broad technical knowledge, specifically in the fields of networking, network security, software security, security operations and incident response.

Qualifications

• 4+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience.
• Bachelor's degree in computer science or equivalent.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent.

Skills

• CCSP (Certified Cloud Security Professional)
• CEH (Certified Ethical Hacker)
• CFR (CyberSec First Responder)
• Cloud+
• CySA+ (CompTIA Cybersecurity Analyst)
• GCED (GIAC Certified Enterprise Defender)
• GICSP (Global Industrial Cyber Security Professional)
• PenTest+

Benefits

Amazon offers comprehensive benefits including health insurance, retirement plans, paid time off, and parental leave. For more information, visit here.