Security Engineer II, Infrastructure Security Identity

AWS Infrastructure Services owns the design planning delivery and operation of all AWS global other words were the people who keep the cloud running. We support all AWS data centers and all of the servers storage networking power and cooling equipment that ensure our customers have continual access to the innovation they rely on. We work on the most challenging problems with thousands of variables impacting the supply chain and were looking for talented people who want to help.

Youll join a diverse team of with software systems and network engineers to develop software defined solutions to increase security while reducing complexity. And youll experience an inclusive culture that welcomes bold ideas and empowers you to own them to completion.

The Infrastructure Identity Security Team is responsible for the security and risk management of the AWS Network Infrastructure. We build systems that detect assess and mitigate risk across the global infrastructure and are accountable for keeping the Amazon Infrastructure secure and compliant with customer requirements.
The Infrastructure Identity Team is looking for a Security Engineer to join our dynamic outcome-driven team. The successful candidate is an owner who can deliver through high performing diverse teams and who understands all parts of security software development deployment and operations. A successful candidate must be one that can make risk-based assessments founded on data and facts. The right candidate must think like both an attacker and defender and drive teams to take actions and mitigate risk. We are seeking engineers with subject matter expertise in network security and software systems specifically with access controls in large segmented networks. We value broad technical knowledge specifically in the fields of networking network security software security security operations and incident response. Were looking for leaders who can lead through challenges and seek to shed light on ambiguity. If that is you Amazon is the place to be as we solve hard problems make history and have fun.

Key job responsibilities
You will aid in the development assessment and analysis of security outcomes for AWS Infrastructure Identity Team.

As a member of the AWS Infrastructure Identity organization you are expected to be the security subject matter expert supporting the devleopment teams.

Identify and drive mitigation of security risks through formal deep dive assessment activities

Lead in the identification and application of remediation and mitigation techniques including the development of monitoring and reporting capabilities.

Additionally
Shape the future in network security through automation
Continuously assess the effectiveness of network security controls and processes
Work alongside software engineers to deliver best in class tools for Identity customers
Codify intentions that define security of traffic flows and maintain them through assessments
Deliver empirical solutions for programs which cross organizational boundaries
Research and recommend optimizations of new and existing network security architecture
Work alongside with software engineers on the design and requirements of security software
Identify network security risks and participate in resolution
Create documentation for operational procedures and user education
Mentor junior staff and participate in interviewing as the subject matter expert on network security

A day in the life
You will assess and document network security risks and help developers build tools that will make you more efficient. You will have the freedom to prioritize as needed to balance your personal life professional growth key stakeholders your teammates and the delivery of your assigned projects. You will help set the security bar and drive the team towards high standards and best practices. Your leadership team and peers will support your ideas and provide opportunities to give and receive feedback freely.

About the team
ABOUT AWS:

Diverse Experiences
Amazon values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description we encourage candidates to apply. If your career is just starting hasnt followed a traditional path or includes alternative experiences dont let it stop you from applying.

Why AWS
Amazon Web Services (AWS) is the worlds most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating thats why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home theres nothing we cant achieve in the cloud.

Inclusive Team Culture
Here at AWS its in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences inspire us to never stop embracing our uniqueness.

Mentorship and Career Growth
Were continuously raising our performance bar as we strive to become Earths Best Employer. Thats why youll find endless knowledge-sharing mentorship and other career-advancing resources here to help you develop into a better-rounded professional.


- 4 years of any combination of the following: threat modeling experience secure coding identity management and authentication software development cryptography system administration and network security experience
- Bachelors degree in computer science or equivalent
- Knowledge of system security vulnerabilities and remediation techniques including penetration testing and the development of exploits or equivalent

- CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud or CySA (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status disability or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process including support for the interview or onboarding process please visit for more information. If the country/region youre applying in isnt listed please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience qualifications and location. Amazon also offers comprehensive benefits including health insurance (medical dental vision prescription Basic Life & AD&D insurance and option for Supplemental life plans EAP Mental Health Support Medical Advice Line Flexible Spending Accounts Adoption and Surrogacy Reimbursement coverage) 401(k) matching paid time off and parental leave. Learn more about our benefits at MN Minneapolis - 159300.00 - 202400.00 USD annually
USA WA Seattle - 159300.00 - 202400.00 USD annually