Security Engineer, Maximum Application Security Team (MAST)
Description For Security Engineer, Maximum Application Security Team (MAST)
Amazon Stores is seeking a Security Engineer to join their Maximum Application Security Team (MAST). This role sits at the intersection of innovation and security, working with one of the world's largest AWS deployments. You'll be responsible for ensuring the security of diverse technologies, from amazon.com to machine learning pipelines and digital healthcare solutions.
As an AppSec engineer, you'll collaborate with development teams to maintain customer safety while enabling innovative service development. Your daily activities will include code inspection, security framework development, and service design consultation. The role requires a unique blend of technical expertise and leadership skills, with a focus on clear communication and risk management.
The ideal candidate combines deep technical knowledge in security with strong interpersonal skills. You'll need to effectively communicate risks to various audiences and harmonize different perspectives while prioritizing security concerns. Amazon's Stores AppSec organization offers a supportive environment focused on work-life harmony, with dedicated resources to optimize team efficiency and focus on high-value tasks.
This position offers the opportunity to work with cutting-edge technologies across Amazon's vast ecosystem. You'll be part of a team that values diverse experiences and perspectives, offering continuous learning opportunities and career growth. The role provides a chance to impact security at scale, working with some of the most complex and innovative systems in technology.
Amazon Security offers a unique environment where security professionals can accelerate their careers across multiple domains including cloud, retail, healthcare, and physical stores. The organization maintains a strong focus on inclusion, continuous learning, and professional development, making it an ideal place for security professionals looking to make a significant impact while growing their careers.
Responsibilities For Security Engineer, Maximum Application Security Team (MAST)
- Creating, updating, and maintaining threat models for software projects
- Manual and Automated Secure Code Review in Java, Python and Javascript
- Development of security automation tools
- Adversarial security analysis using cutting-edge tools
- Security training and outreach for internal development teams
- Security architecture and design guidance
- Independently solve security problems requiring novel approaches
- Influence team's and partners' process, priorities, and choices
Requirements For Security Engineer, Maximum Application Security Team (MAST)
- BS in Computer Science or related field, or equivalent work experience
- Minimum of 3 years of experience in threat modeling, secure coding, identity management, authentication, software development, cryptography, penetration testing, cloud security, mobile security, or network security
- Intermediate knowledge of security engineering, system and network security, authentication protocols, cryptography, or application security
- Experience reading and writing in at least one programming language
- Strong application security background with focus on scalable solutions
- Experience building and securing complex AWS architecture
- Excellent written and verbal communication skills
Benefits For Security Engineer, Maximum Application Security Team (MAST)
- Work-life harmony
- Career development opportunities
- Inclusive team culture
- Ongoing DEI events and learning experiences
- Knowledge-sharing and training resources
- Flexible working culture
