Sr Security Engineer, Abuse Prevention, Devices and Services Security

Amazon Lab126 is seeking an Embedded Security Engineer to research and prototype detection methods for identifying malicious activities to protect consumer devices. This role involves analyzing attack techniques, system services, operating systems, networks, and applications from a security perspective, and discovering security issues under new threat scenarios. Once validated, your prototypes for abuse detection and defense mechanisms will be integrated into consumer devices by collaborating with software developers.

About The Team

Diverse Experiences: Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization sets a high bar for security across all Amazon products and services, offering opportunities to build experience in cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture: In Amazon Security, we embrace learning and curiosity. Ongoing DEI events and learning experiences inspire us to celebrate our uniqueness. Addressing security challenges requires diverse ideas, perspectives, and voices.

Training & Career Growth: We continuously raise our performance bar while providing knowledge-sharing, training, and career-advancing resources to help you grow into a better-rounded professional.

Work/Life Balance: We value work-life harmony, offering flexible work hours and arrangements to support both professional success and personal well-being.

Basic Qualifications

• 4+ years of non-internship experience in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• 5+ years of experience identifying security issues and risks, and developing mitigation plans.
• 4+ years of non-internship scripting, programming, and security code review in common programming languages.
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go.
• Experience in scripting, programming, and security code reviewing in a common programming language.
• Experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• Experience working in identifying security issues and risks, and developing mitigation plans.
• Experience in industry-based security vulnerabilities identification, attack patterns, and remediation techniques.
• Experience as a mentor, tech lead, or leading an engineering team.

Preferred Qualifications

• Experience applying threat modeling or other risk identification techniques.
• Experience with security in service-oriented architectures/microservices and web services.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploit development.
• Experience with training and deploying machine learning systems to solve large-scale optimizations, or experience operating highly available, distributed systems for data extraction, ingestion, and processing.
• Knowledge of network and web-related protocols (e.g., TCP/IP, UDP, IPSEC, HTTP, HTTPS, routing protocols).

Pay

USA, TX, Austin - $178,400.00 - $226,700.00 USD annually.

Benefits

• Sign-on payments and restricted stock units (RSUs).
• Comprehensive health insurance (medical, dental, vision, prescription, Basic Life & AD&D, and optional supplemental life plans).
• Employee Assistance Program (EAP) and Mental Health Support.
• Medical Advice Line and Flexible Spending Accounts.
• Adoption and Surrogacy Reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.

Learn more about our benefits at amazon.jobs/en/benefits.