Security Engineer, Software Supply Chain Security
Description For Security Engineer, Software Supply Chain Security
The Amazon Information Security team is seeking a Security Engineer to ensure our services, applications, and websites meet the highest security standards. This role requires breadth and depth of security knowledge to identify and advise on risks across multiple areas. You'll join a team working on Software Supply Chain Security (SSC-S) initiatives, driving transformative changes in how thousands of Amazon dev teams consume, build, operate, and ship secure software.
Key responsibilities include:
- Evaluating and recommending new security products and technologies
- Identifying security issues and risks, and developing mitigation plans
- Conducting security risk assessments and automating repeatable work streams
- Participating in design discussions and developing user stories for automation
- Influencing Security Governance initiatives and developing a Security dashboard
- Building relationships with technical groups involved in security
- Establishing software supply chain security as a core competency
Amazon Security values diverse experiences and encourages candidates from all backgrounds to apply. The team offers opportunities to build experience in various areas, including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Work-life harmony is prioritized with flexible work arrangements. The inclusive team culture promotes ongoing learning and diversity, equity, and inclusion events. Career growth is supported through knowledge-sharing, training, and other resources to help you develop as a well-rounded professional.
This position offers a base pay range of $136,000 to $212,800 per year, depending on the geographic market and job-related factors. Amazon provides a total compensation package that may include equity, sign-on payments, and a full range of benefits.
Responsibilities For Security Engineer, Software Supply Chain Security
- Evaluate and recommend new and emerging security products and technologies
- Identify security issues and risks, and develop mitigation plans
- Conduct security risk assessments and automate repeatable work streams
- Participate in design discussions and develop user stories for automation
- Influence Security Governance initiatives and develop a Security dashboard
- Establish and maintain relationships with technical groups involved in security
- Build and influence supply chain software security as a core competency
Requirements For Security Engineer, Software Supply Chain Security
- BS in Computer Science or related field, or equivalent work experience
- At least 3 years of experience in application security, threat modeling, secure coding, software development, secure software or system design
- At least 3 years of experience in a development or security role working with development team(s) that delivered commercial software or software-based services
- Advanced knowledge and understanding of security engineering, system and network security, authentication and security protocols, cryptography, or application security
- Experience with multiple programming languages (such as Java, C++, Ruby, Python, Perl, etc.)
Benefits For Security Engineer, Software Supply Chain Security
- Flexible work hours and arrangements
- Equity
- Sign-on payments
- Medical benefits
- Financial benefits
- Other benefits (not specified)
