Jobs · Engineering · Virginia

Senior Security Engineer, AWS Security

Amazon Web Services (AWS) · Arlington, VA · 1 mo ago
EngineeringFull-time
We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We must not repeat job title. Must not include Job ID. Must remove boilerplate like EEO, accommodations, etc. Must preserve all substantive info. We need to parse description. Content: - Opening paragraph: "Come and build innovative services that protect our cloud from security threats. As a Senior Security Engineer (SecEng), you’ll help to build and manage services that detect and automate the mitigation of cybersecurity threats across Amazon’s infrastructure. You’ll work with data scientists, software development engineers, and security engineers across multiple teams to develop innovative security solutions at massive scale. Our services protect the AWS cloud for all customers and preserves our customers’ trust in us. You’ll get to use the full power and breadth of AWS technologies to build services that proactively protect every single AWS customer, both internally and externally, from security threats – not many teams can say that!" That's about the role. - "Key job responsibilities" list: Research, identify, and prioritize security problems that can be detected using automation. Develop detection prototypes for these security problems to enhance our detection capabilities. Identify opportunities to prevent security issues at scale. Mentor and develop teammates both technically and professionally. Seek out, develop, and advocate for new technology to research, identify, and mitigate complex risks. - "About The Team" includes subsections: Diverse Experiences, Why Amazon Security?, Inclusive Team Culture, Training & Career Growth, Work/Life Balance. Those are more about team culture; could be considered part of "About the role" or maybe separate sections like "About the team". But the instruction says use headings like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we should map content accordingly. We have "Basic Qualifications" list: 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience; 5+ years of work in identifying security issues and risks, and developing mitigation plans experience; 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience; Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go; Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques. "Preferred Qualifications": Experience with security in service-oriented architectures/microservices and web services; Experience with AWS Services including EC2, Lambda, S3, DynamoDB, SQS; Experience with big data technologies such as: Hadoop, Hive, Spark, EMR; Experience leveraging native cloud telemetry (GuardDuty, CloudTrail, VPCFlow, R53 Resolver Logs) for detection engineering/incident response. Also there is salary info: "The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits. USA, MD, Annapolis Junction - 178,400.00 - 226,700.00 USD annually USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually" Thus we have Pay (salary range) and Benefits (list). Also schedule? Not mentioned. So we should not include Schedule section. We need sections: About the role (intro paragraph), Responsibilities (list), Requirements (maybe basic qualifications?), Qualifications (maybe preferred qualifications?), Skills (maybe programming languages knowledge?), Benefits, Pay. But we must not create sections with filler. We need to decide mapping. The instruction: Use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). So we can use those exact headings. We need to include a section only when posting has real specific content for it. Thus: - About the role: we have introductory paragraph. Good. - Responsibilities: we have list under "Key job responsibilities". Good. - Requirements: could be basic qualifications (the required experience). That is specific. - Qualifications: could be preferred qualifications. That is specific. - Skills: maybe programming languages knowledge? But that is already part of basic qualifications. Could also be separate but we might combine. However we need to avoid thin sections. If we put Skills as programming languages knowledge, we have content: "Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go". That's specific. Could be a section. - Benefits: we have comprehensive benefits list. Good. - Pay: we have salary ranges for locations. Good. - Schedule: not present, so omit. We must not repeat job title. Not include Job ID. We must remove boilerplate: EEO statement, accommodations link, etc. Also remove "About The Team" subsections? That content is about team culture, but we might incorporate into About the role? However we have already About the role intro; we could add more about team culture under About the role or maybe a separate section but not in allowed headings. Since only allowed headings are those, we could incorporate team culture info into About the role (makes it richer). But we must not invent or summarize away detail; we must preserve all substantive information. So we need to include the team culture details somewhere. If we only have About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, we can put team culture details under About the role (makes sense). That would preserve all. Thus About the role will include the introductory paragraph plus the team culture sections: Diverse Experiences, Why Amazon Security?, Inclusive Team Culture, Training & Career Growth, Work/Life Balance. We'll keep them as paragraphs or maybe lists? They are prose; we can keep as

. We must not include headings like "About The Team". So we just embed that content. Now we need to format lists with

  • . For responsibilities, basic qualifications, preferred qualifications, skills (programming languages), benefits list. We need to be careful not to include duplicated lines. Let's extract each piece. Intro paragraph: "Come and build innovative services that protect our cloud from security threats. As a Senior Security Engineer (SecEng), you’ll help to build and manage services that detect and automate the mitigation of cybersecurity threats across Amazon’s infrastructure. You’ll work with data scientists, software development engineers, and security engineers across multiple teams to develop innovative security solutions at massive scale. Our services protect the AWS cloud for all customers and preserves our customers’ trust in us. You’ll get to use the full power and breadth of AWS technologies to build services that proactively protect every single AWS customer, both internally and externally, from security threats – not many teams can say that!" Team culture sections: - Diverse Experiences: "Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying." - Why Amazon Security?: "At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores." - Inclusive Team Culture: "In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices." - Training & Career Growth: "We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional." - Work/Life Balance: "We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve." We'll combine these into About the role section as paragraphs. Now Responsibilities list: - Research, identify, and prioritize security problems that can be detected using automation. - Develop detection prototypes for these security problems to enhance our detection capabilities. - Identify opportunities to prevent security issues at scale. - Mentor and develop teammates both technically and professionally. - Seek out, develop, and advocate for new technology to research, identify, and mitigate complex risks. Now Requirements (basic qualifications): - 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools - 5+ years of work in identifying security issues and risks, and developing mitigation plans - 4+ years of (non-internship) scripting, programming, and security code review in common programming languages - Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques Note: The last bullet about programming languages could also be under Skills, but we can keep it here; but we also need a Skills section maybe separate. To avoid duplication, we could move programming languages to Skills section, and keep Requirements as the experience years. Let's see. Requirements: years of experience in troubleshooting, identifying security issues, scripting/programming/code review, vulnerability identification. Skills: programming languages knowledge (at least two of Scala, Java, Python, C/C++, Go). That seems appropriate. Thus: Requirements list: - 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools - 5+ years of work in identifying security issues and risks, and developing mitigation plans - 4+ years of (non-internship) scripting, programming, and security code review in common programming languages - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques Skills list: - Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go Now Preferred Qualifications (Qualifications section): - Experience with security in service-oriented architectures/microservices and web services - Experience with AWS Services including EC2, Lambda, S3, DynamoDB, SQS - Experience with big data technologies such as: Hadoop, Hive, Spark, EMR - Experience leveraging native cloud telemetry (GuardDuty, CloudTrail, VPCFlow, R53 Resolver Logs) for detection engineering/incident response Now Benefits list: - Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage) - 401(k) matching - Paid time off - Parental leave We could also mention sign-on payments and RSUs but that's compensation; maybe include

Similar jobs