Senior Security Engineer, Devices and Services Security

Description

• We are seeking a highly skilled Platform Security Engineer to own and drive security outcomes across our Devices infrastructure. In this role, you will operate as a senior security engineer, architecting

Description

• We are seeking a highly skilled Platform Security Engineer to own and drive security outcomes across our Devices infrastructure. In this role, you will operate as a senior security engineer, architecting and delivering security solutions that protect systems at scale while enabling engineering teams to ship with confidence. This is a high-impact, high-ownership position. You will lead complex, cross-functional security initiatives, build automated security tooling, and raise the security bar across the organization. You will work at the intersection of software engineering, cloud infrastructure, and security — embedding security into every layer of our technology stack. In this role, you will work in the OS platform Security team for Amazon devices like Echo, FireTV, Fire tablets, wearables, Kindle readers, and automotive security. Key job responsibilities Help guide the software development lifecycle of devices at Amazon, from security design, threat modeling to code reviews, security testing and fuzzing * Be responsible for analyzing the security of the platform components of consumer devices * Propose, research and develop tools and techniques to improve the security posture of devices at scale * Provide technical security expertise and consultation to device product teams * Identify security risks and work with product engineers to create mitigations * Develop new security policies and procedures * Empower others to improve their security acumen by promoting awareness and developing training materials * Mentorship & Technical Leadership — Mentor junior and mid-level engineers, conduct security-focused code and design reviews, and champion security best practices that scale across the organization. * Cross-Team Collaboration — Partner with software development, infrastructure, and operations teams to embed security into platform design from day one — not as an afterthought. About the team Our team builds and maintains a robust security posture across our platforms. We move at the speed of the business while ensuring security is never the bottleneck. Security is a shared responsibility here — we empower every engineer to build securely, and we hold ourselves to a high bar. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic Qualifications

• - 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience - Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques - Experience as a mentor, tech lead or leading an engineering team

Preferred Qualifications