Senior Security Engineer, Vulnerability Management and Remediation Operations, Defensive Security

• If you're excited about the opportunity to make a significant impact on the security of one of the world's largest and most complex technology ecosystems, we'd love to hear from you!
• Key job responsibilities
• Deeply understand and assess the technical details and potential impact of vulnerabilities across Amazon's infrastructure, services, and applications.
• Lead the detection and analysis of vulnerabilities through the development and optimization of vulnerability scanning, correlation, and prioritization capabilities.
• Thoroughly investigate and triage vulnerabilities, identifying severity and the scope of potential impact to Amazon.
• Design and implement automation, tools and workflows to enhance our operations capabilities.
• Partner with software engineering and operations teams to identify and increase coverage and detection capability gaps across Amazon.
• Mentor and train junior security engineers, sharing your expertise in vulnerability management best practices.
• Collaborate with information security leadership to set the strategic direction for the AVMS program and report on key performance metrics.
• Be part of a global team and participate in periodic on-call responsibilities to ensure the continuous monitoring and remediation of vulnerabilities.
• About the team
• Why Amazon Security
• Work/Life Balance
• We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture.
• Inclusive Team Culture
• Mentorship and Career growth
• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience applying threat modeling or other risk identification techniques or equivalent
• Experience with security in service-oriented architectures/microservices and web services
• Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

None flagged.