Security Engineer, Operational Research and Development, Security Response and Engineering (SRE)

Amazon is looking for a Security Engineer, with exposure to both building and operating production grade tools or services, to help automate and scale security, while responding to security issues across the largest cloud provider in the world.

You will be joining a team that is continually looking for ways to invent and simplify, at scale, how we support incident response, how we improve the security posture of Amazon Security Services, all the while helping driving complex security issues to resolution.

As a Security Engineer, you will be a trusted technical contributor, capable of navigating ambiguity, simplifying complex problems, and effectively communicating a vision. You work part of a team, and make appropriate trade-offs between business and technical constraints. You identify opportunities to converge overlapping technical efforts, and drive the long term strategy with support of other engineering leaders, and partner orgs. You will be expected to carry on-call duties, whether by directly supporting our internal incident security operations response team, or maintaining response capabilities for our customers; you build it, you run it. You will also be expected to drive operational excellence and efficiency in everything you do, whether by researching new, or scaling up existing capabilities, creating sane procedures, automating day-to-day tasks, and ensuring that the needs and issues of our internal customers are being addressed.

Key job responsibilities
- Cloud security is our highest priority. As an Amazon customer, you benefit from an environment built to meet the requirements of the most security-sensitive organizations. As a Security team member, you will help secure that environment.
- The ideal candidate is a creative, will have a well rounded-technical background, as well as a history of building and operating large or complex systems end-to-end. This opportunity requires excellent technical, problem-solving, and communication skills. This candidate should possess verifiable leadership qualities including being proactive, thoughtful, thorough, decisive, and flexible, conducting themselves professionally and with integrity at all times. Maturity, and high level judgment are essential to success. The candidate is not just a spokesperson for projects, but drives to get the right things done.
- At the core of the position is delivery. You will have a strong working knowledge of cloud technologies, and thrive in a fast paced, dynamic environment.
- You are considered a technical point of contact on your team. You engage autonomously with product and system owners to help create, build and innovate security operations.

A day in the life
- Works with internal detection services to ensure proper threat detection coverage across internal accounts, monitoring onboarding processes and maintaining daily audits.
- Implements automated security risk remediation solutions, enabling quick response to detected threats and reported incidents.
- Participates in an on-call rotation supporting immediate response to imminent security issues, while balancing regular development work with operational support requirements for AWS Security Operations.

About the team
Operational Research and Development (ORD) builds automated solutions to address AWS security challenges at scale. Security Engineers and Software Development Engineers collaborate to create robust systems that handle security incidents and automate repetitive tasks. The team transforms manual security processes into code-driven solutions, allowing security teams to focus on complex investigations while maintaining consistent protection across AWS services.

QUALIFICATIONS DE BASE
- BS degree in Computer Science, Security, Distributed Systems, Networking, Computer Engineering, (or) 3+ years’ equivalent technology experience.
- 3+ years experience with focus in areas such as systems, network, web protocols, and/or application security.
- 1+ year experience automating security tasks, or building security tools.
QUALIFICATIONS APPRÉCIÉES
- A MS degree in Computer Science, MIS, Computer Engineering, or 5+ years’ equivalent technology experience.
- 2+ years experience building scalable incident response utilities and automated tools.
- A high degree of organisation and be very detail-oriented. Must be able to interact with and influence people at all levels.
- Experience with virtualisation technologies, familiarity with AWS and GuardDuty services is highly valued in particular.
- Extensive knowledge of internet security issues and threat landscape.
- Strong knowledge of web protocols and an in-depth knowledge of Linux/Unix tools and architecture.
- Well-rounded background in host, network and application security.
- Previous experience on a Security Operations team, or experience coordinating responses to security incidents.
- Excellent written and oral communication skills.

Amazon est un employeur engagé pour l'égalité des chances. Nous sommes convaincus qu'une main d'oeuvre diversifée est essentielle à notre réussite. Nous prenons nos décisions de recrutement en fonction de votre expérience et de vos compétences. Nous apprécions votre envie de découvrir, d'inventer, de simplifier et de construire. La protection de votre vie privée et la sécurité de vos données constituent depuis longtemps une priorité absolue pour Amazon. Veuillez consulter notre Politique de Confidentialité pour en savoir plus sur la façon dont nous collectons, utilisons et traitons les données personnelles de nos candidats.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.