Security Engineer

Amazon

  • Dublin
  • Permanent
  • Full-time
  • 21 days ago
DESCRIPTIONThe Global Services, Security (GSS) team, a part of Amazon Web Services, leverages the expertise and ingenuity of our builders to establish scalable security solutions for both internal and external customers that drive business outcomes. Our goal of securing the world's workloads and building a brighter future for humanity requires us to focus on reliable delivery of bar raising security outcomes and investment in security mechanisms and automation on behalf of our customers.At Amazon Web Services (AWS), Security is our highest priority. The Security Escalations team in GSS is responsible for the security of services offered by Sales, Marketing and Global Services (SMGS). We are looking for a passionate, innovative, results oriented technical program manager. Security Escalations is responsible for driving innovative enhancements that raise the bar for how AWS employees interact with resources, systems, and data. You are someone who loves managing programs and is committed to formulating and implementing wide-ranging process improvements. You are passionate about the security of the cloud and you want to solve real business problems. We have a team culture that encourages innovation and we expect team members and management alike to take a high degree of ownership for their program vision and execution of ideas. You possess strong verbal and written communication skills, can operate independently, and have a consistent track record of delivery. You have an understanding of technical concepts, and possess a broad understanding of AWS services. You are organized, detail-oriented, and drive towards improved performance while advocating for customer needs.A Security Engineer must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the security team's work and constantly seek opportunities for process improvement. They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AWS and Partner Security, and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas.You will have the combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work. This role will provide career growth opportunities as you gain new security skills in the course of your duties.Key job responsibilities
A successful candidate will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include small-projects in addition to managing incident response activities. This role will provide career growth opportunities as you gain new security skills in the course of your duties.Triage new incoming issues to determine the level of risk they present to AWS, and then accordingly prioritise its remediation in conjunction with the impacted service team.Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon
Demonstrate high capacity and tolerance for context switching and interruptions while remaining productive and effectiveEscalate issues to senior AWS leadership if you feel your issues are not progressing at the correct pace based on impact to ensure we are putting customers first.Explore building and improving our tooling to make your own life easier and share that benefit with all our engineers globally.
Assistance with recruiting activities and administrative workKey job responsibilities
  • Lead the triage and response to security incidents, assessing their potential impact on AWS systems and customers.
  • Coordinate with service teams to implement rapid, effective remediation strategies.
  • Develop and maintain incident response playbooks and procedures.
  • Security Operations:
  • Monitor security alerts and logs to detect potential threats or anomalies.
  • Conduct thorough post-incident analyses and contribute to lessons-learned documentation.
  • Collaborate with other security teams to improve detection and response capabilities.
  • Automation and Tool Development:
  • Design and implement automation tools to enhance incident response efficiency and effectiveness.
  • Continuously improve existing security tooling and processes.
  • Share innovations and best practices with the global AWS security community.
A day in the life
AWS Global Services includes experts from across AWS who help our customers design, build, operate, and secure their cloud environments. Customers innovate with AWS Professional Services, upskill with AWS Training and Certification, optimize with AWS Support and Managed Services, and meet objectives with AWS Security Assurance Services. Our expertise and emerging technologies include AWS Partners, AWS Sovereign Cloud, AWS International Product, and the Generative AI Innovation Center. You'll join a diverse team of technical experts in dozens of countries who help customers achieve more with the AWS cloud.About the team
As a Security Engineer, you will build or enhance existing automation to improve operational efficiency or generate new insights from existing data. You will identify, evaluate, and prioritize opportunities for automating Partner Security mechanisms across a diverse landscape of business tools, systems, and architectures. You will meet with other teams across the Global Services organization to collaborate on security mechanisms, like partner onboarding and offboarding workflows, to improve consistency and compliance throughout the organization.You will contribute to security training programs, best practices documentation, and security policies tailored for internal teams engaging with subcontracted partners. You will implement scalable processes and tooling solutions to facilitate regular audits of partner security controls and compliance standards. Additionally, you will provide technical expertise and support for ongoing security assessments of Partners and subcontractors within the SMGS business units, ensuring adherence to AWS security standardsDiverse Experiences
AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.Why AWS?
Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating - that's why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.Inclusive Team Culture
AWS values curiosity and connection. Our employee-led and company-sponsored affinity groups promote inclusion and empower our people to take pride in what makes us unique. Our inclusion events foster stronger, more collaborative teams. Our continual innovation is fueled by the bold ideas, fresh perspectives, and passionate voices our teams bring to everything we do.Mentorship & Career Growth
We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.BASIC QUALIFICATIONS- This role requires you to be a national of an EU member state
- 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Knowledge of commonly found software security vulnerabilities (like OWASP top 10) and remediation techniques
- 2+ years of programming in one of the following or similar: Python, Ruby, Go, Swift, Java, .Net, C++.PREFERRED QUALIFICATIONS- Experience with AWS products and services
- Experience with any combination of the following: threat modelling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Experience with Security Engineering (building tools) and Assurance methodologies e.g. fuzzing, static and dynamic code analysisAmazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice ( ) to know more about how we collect, use and transfer the personal data of our candidates.Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.

Amazon