drjobs Security Engineer II, Infrastructure Security Vulnerability Management

Security Engineer II, Infrastructure Security Vulnerability Management

Employer Active

1 Vacancy
drjobs

Job Alert

You will be updated with latest job alerts via email
Valid email field required
Send jobs
Send me jobs like this
drjobs

Job Alert

You will be updated with latest job alerts via email

Valid email field required
Send jobs
Job Location drjobs

Seattle - USA

Yearly Salary drjobs

$ 136000 - 212800

Vacancy

1 Vacancy

Job Description

AWS Infrastructure Services owns the design planning delivery and operation of all AWS global infrastructure. In other words were the people who keep the cloud running. We support all AWS data centers and all of the servers storage networking power and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems with thousands of variables impacting the supply chain and were looking for talented people who want to help.

Youll join a diverse team of software hardware and network engineers supply chain specialists security experts operations managers and other vital roles. Youll collaborate with people across AWS to help us deliver the highest standards for safety and security while providing seemingly infinite capacity at the lowest possible cost for our customers. And youll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.

The Infrastructure Security Team is responsible for the security and risk management of the AWS Infrastructure. We build systems that detect assess and mitigate risk across the global infrastructure and are accountable for keeping the Amazon Infrastructure secure and compliant with customer requirements. The Infrastructure Security Vulnerability Management Team is looking for a Security Engineer to join our dynamic outcomedriven team. The successful candidate is an owner who can deliver through high performing diverse teams and who understands all parts of security software development deployment and operations. You must possess strong technical networking supply chain security and/or data center compliance background strong verbal and written communication skills be selfdriven demonstrate high impact and influence across teams and deliver high quality results in a fastpaced environment. Were looking for leaders who can lead through challenges and seek to shed light on ambiguity. If that is you Amazon is the place to be as we solve hard problems make history and have fun.

Key job responsibilities
You will aid in the development assessment and analysis of security outcomes for AWS Infrastructure (networking supply chain security and/or data center compliance) in accordance with NIST FedRAMP ISO and AWS standards.

As a member of the Infrastructure Security Compliance organization you are expected to be the subject matter expert on regulatory compliance legal implications on security risks and opportunities.

Identify and drive mitigation of security risks through formal deep dive assessment activities

Lead in the identification and application of remediation and mitigation techniques including the development of monitoring and reporting capabilities for continued compliance.

Lead compliance related discussions both internally with stakeholders and customers and externally representing Infrastructure holistically in audit/regulatory exams.

You will assist technical teams in resolving security issues and concerns and providing contextualization as well to how compliance with various standards and frameworks is achieved.

About the team
ABOUT AWS:

Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description we encourage candidates to apply. If your career is just starting hasnt followed a traditional path or includes alternative experiences dont let it stop you from applying.

Why AWS
Amazon Web Services (AWS) is the worlds most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating thats why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance
We value worklife harmony. Achieving success at work should never come at the expense of sacrifices at home which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home theres nothing we cant achieve in the cloud.

Inclusive Team Culture
Here at AWS its in our nature to learn and be curious. Our employeeled affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences inspire us to never stop embracing our uniqueness.

Mentorship and Career Growth
Were continuously raising our performance bar as we strive to become Earths Best Employer. Thats why youll find endless knowledgesharing mentorship and other careeradvancing resources here to help you develop into a betterrounded professional.


4 years of any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
Bachelors degree in computer science or equivalent
Knowledge of system security vulnerabilities and remediation techniques including penetration testing and the development of exploits or equivalent
A strong understanding of core internet and networking technologies (routing protocols network architecture TCP/IP etc.)
Excellent communication and data presentation skills that allow you to clearly compellingly and effectively influence audiences internally and externally across organizational boundaries

CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud or CySA (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest
Experience performing risk assessments of vulnerabilities and evaluating mitigating controls in large complex networks
Linux systems engineering skills and a solid grasp on operating system fundamentals
Knowledge of at least one scripting language (Python Perl Ruby etc.)

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136000/year in our lowest geographic market up to $212800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on jobrelated knowledge skills and experience. Amazon is a total compensation company. Dependent on the position offered equity signon payments and other forms of compensation may be provided as part of a total compensation package in addition to a full range of medical financial and/or other benefits. For more information please visit
This position will remain posted until filled. Applicants should apply via our internal or external career site.

Employment Type

Full-Time

About Company

Report This Job
Disclaimer: Drjobpro.com is only a platform that connects job seekers and employers. Applicants are advised to conduct their own independent research into the credentials of the prospective employer.We always make certain that our clients do not endorse any request for money payments, thus we advise against sharing any personal or bank-related information with any third party. If you suspect fraud or malpractice, please contact us via contact us page.