Security Engineer III - AMZ25957.4

About

Amazon.com is an Equal Opportunity – Affirmative Action Employer – Minority / Female / Disability / Veteran / Gender Identity / Sexual Orientation

Responsibilities

• Conduct comprehensive security review within the Secure Software Development Life Cycle (SDLC) for Amazon and AWS services, specifically focusing on database, analytics, search, and storage product offerings.
• Perform detailed design reviews and threat modeling for new features and offerings, including penetration testing coordination and vulnerability management for Amazon product teams' software.
• Lead holistic security assessments of internal and external services supporting Amazon cloud offerings, with emphasis on identifying, documenting, and managing legacy vulnerabilities.
• Execute peer reviews of security engineering work to ensure thorough due diligence, identify potential antipatterns, and validate security measures before feature releases.
• Provide expert security consultation to software engineering teams, covering: Cryptography, Security in transit and at rest, Database security, Application security, Infrastructure security and Internal security processes.
• Develop security review tools utilizing Java and Soot Framework for static code analysis, Python for semantic analysis and Automation solutions for ticketing and management processes.
• Create comprehensive security documentation for database, analytics, search, and storage services to facilitate high-quality security analysis.
• Conduct in-depth security code reviews of repositories and commits, including analysis of internal AWS frameworks for: Authentication, Input Validation, Logging (CloudTrail), and Deployment systems.

Compensation

(40 hours / week, 8:00am-5:00pm, Salary Range $178400 - $226700)