Application Security Engineer, ETSE

4 weeks ago


Vancouver, Canada Amazon Full time

Help us protect not only the Amazon Web Services (AWS) cloud computing environment but all of our customers as well Since 2006, our great team at AWS has been enabling our customers to bring great ideas to life in ways that aren’t possible in traditional IT environments. With AWS you can flexibly harness compute, storage, security, and other services from across the globe as your business demands them. AWS Security is on the cutting edge of many security issues for a wide variety of platforms and technologies including cloud services, Internet of things (IoT), identity and access management, mobile devices, virtualization and custom hardware, all operating at massive scale.

AWS Security is looking for an Application Security Engineer to help validate that our services, applications, and websites are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our cutting-edge services.

A Security Engineer at Amazon is expected to be strong in multiple domains and provide significant contributions to the AWS IT Security team and to multiple groups throughout Amazon. Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. You are also expected to mentor more junior engineers and be a security thought leader for the organization.

A Security Engineer must foster constructive dialogue and seek resolution when confronted with discordant views. Engineers in this role are expected to participate fully in the planning of the AWS IT Security team’s work and constantly seek opportunities for process improvement. They should also have a deep understanding of at least one specialty for which they are a sought out resource (both within AWS IT Security and by groups throughout Amazon), while having an understanding of the application of Information Security in a broad range of technical areas.

A successful candidate will need a combination of troubleshooting, technical, and communication skills, as well as the ability to handle a mix of disparate tasks which may include project and software development work.

Key job responsibilities
  1. Application security reviews
  2. Mobile security reviews
  3. Secure architecture design
  4. Threat modeling
  5. Projects and research work as needed
  6. Security training and outreach to internal development teams
  7. Security guidance documentation
  8. Security tool development
  9. Security metrics delivery and improvements
  10. Assistance with recruiting activities and administrative work

A day in the life
As a security engineer, you will perform various day-to-day activities related to ensuring the security of Amazon's systems. These tasks may include conducting application security reviews to identify vulnerabilities in software applications that could be exploited by attackers, performing penetration testing to assess the effectiveness of existing security controls and identify potential weaknesses, providing training and outreach to internal development teams to improve their understanding of security best practices, developing security guidance documentation to help others understand how to implement secure systems and applications, developing security tools to automate or streamline security processes, delivering security metrics to stakeholders and working on improving the overall security posture of your organization. Additionally, you may also be involved in recruiting activities and administrative work related to these tasks.

BASIC QUALIFICATIONS

- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Bachelor's degree in computer science or equivalent
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP

PREFERRED QUALIFICATIONS

- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Experience with AWS products and services
- Experience with programming languages such as Python, Java, C++

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, disability, age, or other legally protected status. If you would like to request an accommodation, please notify your Recruiter.

The base salary for this position ranges from $137,800/year up to $230,100/year. Salary is based on a number of factors and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. Applicants should apply via our internal or external career site.

Posted: September 13, 2024 (Updated 3 days ago)

#J-18808-Ljbffr

  • Vancouver, Canada Amazon Full time

    Help us protect not only the Amazon Web Services (AWS) cloud computing environment but all of our customers as well! Since 2006, our great team at AWS has been enabling our customers to bring great ideas to life in ways that aren’t possible in traditional IT environments. With AWS you can flexibly harness compute, storage, security, and other services from...


  • Vancouver, British Columbia, Canada Amazon Full time $137,800

    Job Title: Application Security EngineerAt Amazon, we're committed to protecting our customers and our cloud computing environment. As an Application Security Engineer, you'll play a critical role in ensuring the security of our services, applications, and websites.Key Responsibilities:Conduct application security reviews to identify vulnerabilities and...


  • Vancouver, Canada D3 Security Full time

    p>D3 Security provides the world's leading platform for security orchestration, automation, incident response, and investigation/case management. Today, more than 1000 organizations - including over 100 of the Fortune 500 rely on D3 to build, automate and execute incident response plans, connect with third-party technologies and apply data-driven decisions...


  • Vancouver, Canada Microsoft Full time

    Security represents the most critical priorities for our customers in a world awash in digital threats, regulatory scrutiny, and estate complexity. Microsoft Security aspires to make the world a safer place for all. We want to reshape security and empower every user, customer, and developer with a security cloud that protects them with end-to-end, simplified...


  • Vancouver, Canada D3 Security Full time

    D3 Security provides the world's leading platform for security orchestration, automation, incident response, and investigation/case management. Today, more than 1000 organizations - including over 100 of the Fortune 500 rely on D3 to build, automate and execute incident response plans, connect with third-party technologies and apply data-driven decisions...


  • Vancouver, Canada D3 Security Full time

    D3 Security provides the world's leading platform for security orchestration, automation, incident response, and investigation/case management. Today, more than 1000 organizations - including over 100 of the Fortune 500 rely on D3 to build, automate and execute incident response plans, connect with third-party technologies and apply data-driven decisions...


  • Vancouver, Canada Spare Full time

    DescriptionWe are hiring our first Security Engineer to join our Engineering team!As the founding Security Engineer at Spare, you will play a pivotal role in building a secure platform, actively fixing vulnerabilities, and leading key security initiatives. This role is for someone who thrives in a hands-on engineering environment, is passionate about coding...


  • Vancouver, British Columbia, Canada Amazon Full time

    About the RoleAt Amazon, we are committed to protecting our customers and our cloud computing environment. We are seeking an experienced Application Security Engineer to join our team. As a key member of our AWS Security team, you will be responsible for analyzing the security of our applications and services, discovering and addressing security issues,...

  • Security Engineer

    6 months ago


    Vancouver, Canada Dapper Labs Full time

    As a Security Engineer at Dapper Labs, you will be instrumental in shaping the security landscape of our innovative blockchain solutions. This role spans across infrastructure and application security, compliance, strategic security initiatives, and legal aspects related to the crypto environment. Embracing a "shift left" approach, you will integrate...

  • Security Engineer

    6 months ago


    Vancouver, Canada Dapper Labs Full time

    As a Security Engineer at Dapper Labs, you will be instrumental in shaping the security landscape of our innovative blockchain solutions. This role spans across infrastructure and application security, compliance, strategic security initiatives, and legal aspects related to the crypto environment. Embracing a "shift left" approach, you will integrate...

  • Security Engineer

    3 months ago


    Vancouver, Canada Dapper Labs Full time

    As a Security Engineer at Dapper Labs, you will be instrumental in shaping the security landscape of our innovative blockchain solutions. This role spans across infrastructure and application security, compliance, strategic security initiatives, and legal aspects related to the crypto environment. Embracing a "shift left" approach, you will integrate...

  • Security Engineer

    3 months ago


    Vancouver, Canada Dapper Labs Full time

    As a Security Engineer at Dapper Labs, you will be instrumental in shaping the security landscape of our innovative blockchain solutions. This role spans across infrastructure and application security, compliance, strategic security initiatives, and legal aspects related to the crypto environment. Embracing a "shift left" approach, you will integrate...

  • Security Engineer

    5 months ago


    Vancouver, Canada SAP Full time

    We help the world run better At SAP, we enable you to bring out your best. Our company culture is focused on collaboration and a shared passion to help the world run better. How? We focus every day on building the foundation for tomorrow and creating a workplace that embraces differences, values flexibility, and is aligned to our purpose-driven and...


  • Vancouver, Canada Mastercard Full time

    We work to connect and power an inclusive, digital economy that benefits everyone, everywhere by making transactions safe, simple, smart and accessible. Using secure data and networks, partnerships and passion, our innovations and solutions help individuals, financial institutions, governments and businesses realize their greatest potential. Our decency...


  • Vancouver, British Columbia, Canada Spare Full time

    About the RoleWe are seeking an experienced Chief Security Engineering Manager to join our team at Spare. This is a full-time position with a salary range of $120,000 - $180,000 per year, depending on experience.Job SummaryThe Chief Security Engineering Manager will be responsible for leading our security engineering efforts, including platform and...


  • Vancouver, Canada 2K Full time

    p>As a Security Engineer at Dapper Labs, you will be instrumental in shaping the security landscape of our innovative blockchain solutions. This role spans across infrastructure and application security, compliance, strategic security initiatives, and legal aspects related to the crypto environment. Embracing a "shift left" approach, you will integrate...


  • Vancouver, Canada 2K Full time

    The EA SPORTS Security team helps make the games safe, secure, and fun by partnering with development teams, analyzing large volumes of data, and responding to security incidents. As a Security Software Engineer, you will partner with game developers, data scientists, fraud analysts, and other security software engineers to address some of the most...


  • Vancouver, British Columbia, Canada Spare Full time

    We are revolutionizing the way people experience transportation, and we need a highly skilled Security Software Developer to join our Engineering team.About this rolePlatform & Application Defense: You will work closely with our engineering teams to identify and fix vulnerabilities, enhancing the security and resilience of our cloud platform.Security...

  • Security Supervisor

    4 weeks ago


    Vancouver, British Columbia, Canada VPS Security Full time

    Job Title: Security Guard SupervisorVPS Security is seeking a highly skilled and experienced Security Guard Supervisor to join our team. As a Security Guard Supervisor, you will be responsible for overseeing the daily operations of our security team, ensuring the safety and security of our clients and their properties.Key Responsibilities:Supervise a team of...


  • Vancouver, British Columbia, Canada D3 Security Full time

    D3 Security is a leading innovator in the field of artificial intelligence, harnessing its power to revolutionize cybersecurity operations. We are a dynamic and fast-growing company with a collaborative environment where creativity and technical expertise thrive.We are seeking an experienced Cybersecurity Innovator to join our team. In this role, you will...