Security Engineer, AWS Trust & Safety

AWS Trust and Safety (T&S) Risk & Response (R&R) is seeking a motivated Security Engineer with a strong background in incident response, threat investigation, and developing solutions to security issues. As a Security Engineer in R&R, you will employ your technical skills to develop solutions to complex and ambiguous security-related events originating from AWS resources that threaten the confidentiality, integrity, and availability of other AWS customers, the AWS network, or external internet users. You will build proofs of concept and develop tooling/automation solutions that help T&S and AWS scale with the evolving threat landscape.

T&S is the primary organization within AWS responsible for mitigating customer resources that violate the AWS AUP. We work closely with AWS service teams to determine appropriate mitigation actions and act as the customer facing outreach team on their behalf.

Key job responsibilities

1. You are a technical leader within the T&S organization. You must understand the mechanics of how security incidents occur in the cloud, understand the mitigation options, and provide guidance to frontline T&S employees in response to violations of the AUP.
2. Use SQL and Python or similar scripting languages to automate tasks and retrieve data to identify trends in abuse.
3. You will engage autonomously with AWS customers, programs, and services to create, build, and innovate security operations.
4. Communicate ideas effectively, both verbally and in writing, to all types of audiences from front line employees to AWS VPs.
5. Complete projects that contribute to the objectives and goals that strive to meet our strategic vision for the team.
6. Partner effectively with customers and stakeholders. You will help establish a roadmap and successfully deliver engineering solutions that drive towards accomplishing the team’s mission.
7. Work effectively with customers, leaders, and other engineering teams. You must foster a constructive dialogue, harmonize discordant views, and lead the resolution of contentious issues (influence and build consensus).
8. Proactively identify risks and bring them to the attention of your manager, customers, and stakeholders with plans for mitigation before they become larger events.
9. You will be Amazon’s voice in technical security engagements with customers addressing abuse.
10. Collect, analyze, and document information to author threat reports to drive scalable mitigation and remediation actions.
11. Provide situational awareness on the current threat landscape and the TTPs associated with specific threats to our business, including ongoing malware campaigns.
12. Collect data from intelligence communities, threat intelligence platforms, open source data repositories, and other sources to analyze TTPs and anomalies.
13. Drive operational excellence and efficiency in everything you do, whether by researching new, or scaling up existing capabilities, creating effective mechanisms, and automating day-to-day tasks.
14. Participate in scheduled 24/7 on-call duties.

A day in the life

R&R is the team within T&S who respond to reports of AWS AUP violations and security incidents to:

1. Identify tactics, techniques, and procedures used by abusive threats and identify/execute remediation actions to remove the threat from AWS.
2. Develop internal automations that facilitate the detection of AUP violations by threat actors and work with other AWS security teams to develop automated detections for abusive trends.
3. Respond to incidents and manage the response for T&S from notification to remediation.
4. Represent T&S as the technical expert on abuse during high-impact situations requiring immediate response to protect AWS and its customers from violations of the AWS AUP.

A successful candidate will have a firm grasp of cloud computing and a passion for developing technical solutions which facilitate the investigation and development of threat intelligence. You must be an enthusiastic learner and insatiably curious. You will have a demonstrated history of driving workable solutions, even in the face of resource limitations, as well as environmental, legal, and technical challenges. We seek a team player who prioritizes well, communicates clearly, and has a consistent track record of delivering results. You must be proactive in removing roadblocks, always looking for ways to innovate and operate more efficiently, and be able to handle multiple competing priorities in a fast-paced environment. You will need to influence internal and external globally dispersed stakeholders, and be able to effectively rally support for R&R’s projects and your own initiatives.

BASIC QUALIFICATIONS

- A MS degree in Computer Science, MIS, Computer Engineering, or 8+ years’ equivalent technology experience.
- 5+ years global analysis and threat mitigation background
- 5+ years scripting/programming experience: Python, C, C++, Java, Ruby, and/or PowerShell
- 3+ years of experience building with and securing AWS cloud services such as Lambda, EC2, and S3.
- Experience with virtualization technologies, familiarity with AWS and GuardDuty services is highly valued in particular.
- One or more professional network and security certifications such as Security+, CEH, CCNA, GSEC, CISA or CISSP (or equivalent work experience)
- Extensive knowledge of internet security issues and threat landscape.

PREFERRED QUALIFICATIONS

Amazon is an equal opportunities employer, and we value your passion to discover, invent, simplify and build. We welcome applications from all members of society irrespective of age, sex, disability, sexual orientation, race, religion or belief. Amazon is strongly committed to diversity within its community and especially welcomes applications from South African citizens who are members of designated groups who may contribute to Employment Equity within the workplace and the further diversification of ideas. In this regard, the relevant laws and principles associated with Employment Equity will be considered when appointing potential candidates. We are required by law to verify your ability to work lawfully in South Africa. Amazon requires that you submit a copy of either your identity document or your passport and any applicable work permit if you are a foreign national, along with an updated curriculum vitae.

Posted: August 13, 2024 (Updated 12 days ago)

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.