Security Engineer, Operational Research and Development, Security Response and Engineering

DESCRIPTION

Amazon is looking for a Security Engineer, with exposure to both building and operating production grade tools or services, to help automate and scale security, while responding to security issues across the largest cloud provider in the world.

You will be joining a team that is continually looking for ways to invent and simplify, at scale, how we support incident response, how we improve the security posture of Amazon Security Services, all the while helping driving complex security issues to resolution.

As a Security Engineer, you will be a trusted technical contributor, capable of navigating ambiguity, simplifying complex problems, and effectively communicating a vision. You work part of a team, and make appropriate trade-offs between business and technical constraints. You identify opportunities to converge overlapping technical efforts, and drive the long term strategy with support of other engineering leaders, and partner orgs. You will be expected to carry on-call duties, whether by directly supporting our internal incident security operations response team, or maintaining response capabilities for our customers; you build it, you run it. You will also be expected to drive operational excellence and efficiency in everything you do, whether by researching new, or scaling up existing capabilities, creating sane procedures, automating day-to-day tasks, and ensuring that the needs and issues of our internal customers are being addressed.

Key job responsibilities
- Cloud security is our highest priority. As an Amazon customer, you benefit from an environment built to meet the requirements of the most security-sensitive organizations. As a Security team member, you will help secure that environment.
- At the core of the position is delivery. You will have a strong working knowledge of cloud technologies, and thrive in a fast paced, dynamic environment.
- You are considered a technical point of contact on your team. You engage autonomously with product and system owners to help create, build and innovate security operations.

A day in the life
- Works with internal detection services to ensure proper threat detection coverage across internal accounts, monitoring onboarding processes and maintaining daily audits.
- Implements automated security risk remediation solutions, enabling quick response to detected threats and reported incidents.
- Participates in an on-call rotation supporting immediate response to imminent security issues, while balancing regular development work with operational support requirements for AWS Security Operations.

About the team
Operational Research and Development (ORD) builds automated solutions to address AWS security challenges at scale. Security Engineers and Software Development Engineers collaborate to create robust systems that handle security incidents and automate repetitive tasks. The team transforms manual security processes into code-driven solutions, allowing security teams to focus on complex investigations while maintaining consistent protection across AWS services.

BASIC QUALIFICATIONS
- BS degree in Computer Science, Security, Distributed Systems, Networking, Computer Engineering, (or) 3+ years’ equivalent technology experience.
- 1+ year experience automating security tasks, or building security tools.

PREFERRED QUALIFICATIONS
- A MS degree in Computer Science, MIS, Computer Engineering, or 5+ years’ equivalent technology experience.
- 2+ years experience building scalable incident response utilities and automated tools.
- A high degree of organisation and be very detail-oriented. Must be able to interact with and influence people at all levels.
- Experience with virtualisation technologies, familiarity with AWS and GuardDuty services is highly valued in particular.
- Extensive knowledge of internet security issues and threat landscape.
- Strong knowledge of web protocols and an in-depth knowledge of Linux/Unix tools and architecture.
- Previous experience on a Security Operations team, or experience coordinating responses to security incidents.
- Excellent written and oral communication skills.