Description AWS Managed Services (AMS) is seeking a Senior Security who desires to join our global, innovative & high-energy Security team. The right candidate must thrive in high-pressure situations, think like both an attacker & defender, and help relevant teams to take the right actions in the right timeframes to mitigate risks. The AMS Security team are also responsible for working with customers on their adoption and on activities that require greater security judgment. They work hands-on developing detective capabilities, identifying mitigations to vulnerabilities and respond to potential threats to Amazon systems and those of our customers. Security Engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security best practices. You are also expected to mentor more junior engineers and be a security thought leader for the organization ABOUT YOU This position requires a person with a security background who will show initiative by proactively identifying security flaws and vulnerabilities, quickly assessing the potential risk, drive for the right architectural decisions across many different teams to harden infrastructure, while educating the broader team. The successful candidate will have a mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, application security, infrastructure security, security operations, security response, and security intelligence. Responsibilities of AMS Security Engineers are spread across the following work streams: - Working with AMS development teams to employ Secure Development Lifecycle to the code and componentry we develop, using practices such as threat modeling. - Working with AMS customers to migrate to AWS so that they reduce their security risk to an acceptable level, while leveraging the maximum security benefit of using AWS. - Working with AMS Operations to deliver a secure service, while proactively detecting and responding to security risks, threats or incidents. About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world’s most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating — that’s why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it’s in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve in the cloud. Basic Qualifications - 5+ years’ equivalent information security or experience. - Demonstrated ability to identify common security risks and formulate and execute security strategies - Demonstrated experience configuring and securing web applications, cryptography, including WAF, DDoS mitigation strategies and application hardening - Extensive knowledge of Internet protocols, architectures, and security design principles. - Possess self-drive to keep moving things forward even in the face of ambiguity and imperfect knowledge (avoid “analysis paralysis”). - Experience working in a customer-facing technical role Preferred Qualifications - Experience triaging security alerts and executing incident response - Experience with virtualization technologies, especially with AWS services. - Excellent communication skills - Experience in customer support, client & stakeholder management, incident handling, or forensics. - Experience in Compliance Requirements (e.g. SOX, ISO, HIPPA, FedRamp, etc.) - Previous experience on a Security Operations team, experience coordinating responses to security incidents, or in a SOC environment. - One or more security-related certifications, such as CISSP, CEH, CISA, CISM, SECURITY+, etc. Acknowledgement of country: In the spirit of reconciliation Amazon acknowledges the Traditional Custodians of country throughout Australia and their connections to land, sea and community. We pay our respect to their elders past and present and extend that respect to all Aboriginal and Torres Strait Islander peoples today. IDE statement: Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer, and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, disability, age, or other legally protected attributes. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.