Senior Security Engineer, AWS Managed Services (AMS) - Amazon

Description AWS Managed Services (AMS) is seeking a Senior Security who desires to join our global, innovative & high-energy Security team. The right candidate must thrive in high-pressure situations, think like both an attacker & defender, and help relevant teams to take the right actions in the right timeframes to mitigate risks. The AMS Security team are also responsible for working with customers on their adoption and on activities that require greater security judgment. They work hands-on developing detective capabilities, identifying mitigations to vulnerabilities and respond to potential threats to Amazon systems and those of our customers. Security Engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security best practices. You are also expected to mentor more junior engineers and be a security thought leader for the organization ABOUT YOU This position requires a person with a security background who will show initiative by proactively identifying security flaws and vulnerabilities, quickly assessing the potential risk, drive for the right architectural decisions across many different teams to harden infrastructure, while educating the broader team. The successful candidate will have a mix of deep technical knowledge and a demonstrated background in information security. We value broad and deep technical knowledge, specifically in the fields of cryptography, application security, infrastructure security, security operations, security response, and security intelligence. Key job responsibilities As an AMS Security Engineer, you will be responsible for maintaining and enhancing the security posture of Amazon Managed Services (AMS) across multiple work streams. Your core responsibilities will include: Incident Response and Threat Management - Investigate and respond to security incidents promptly and effectively - Deploy and maintain security guardrails to prevent future incidents - Analyze and assess trends in emerging threats to stay ahead of potential risks Cross-Team Collaboration and Service Security - Work closely with various AWS teams to ensure the overall security of AMS - Develop and maintain security documentation and procedures Continuous Improvement and Innovation - Stay updated on the latest security trends, technologies, and best practices - Propose and implement innovative solutions to enhance the security posture of AMS - Contribute to the development of internal security tools and automation processes - Mentor junior security team members and foster a culture of security consciousness Stakeholder Management and Reporting - Communicate security risks, incidents, and mitigation strategies to both technical and non-technical stakeholders - Prepare and present regular security status reports to management - Collaborate with customers and partners to address security concerns and ensure compliance with security requirements A day in the life As a Security Engineer in AWS Managed Services (AMS), your responsibilities include monitoring networks and systems for potential threats, performing triage for security alerts, documenting suspicious activity, and reporting issues so they can be adequately handled. You will work alongside our security engineers and partner teams to perform daily threat detection and incident response, using the full capability of AWS technologies and services to detect and mitigate cyber threats at a massive scale and help protect AWS Customers. You should also enjoy learning about the most up-to-date new technologies and procedures to protect information systems and data. About the team Diverse Experiences AWS values diverse experiences. Even if you do not meet all of the preferred qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying. Why AWS? Amazon Web Services (AWS) is the world's most comprehensive and broadly adopted cloud platform. We pioneered cloud computing and never stopped innovating - that's why customers from the most successful startups to Global 500 companies trust our robust suite of products and services to power their businesses. Inclusive Team Culture Here at AWS, it's in our nature to learn and be curious. Our employee-led affinity groups foster a culture of inclusion that empower us to be proud of our differences. Ongoing events and learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences, inspire us to never stop embracing our uniqueness. Mentorship & Career Growth We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, mentorship and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve in the cloud. Basic Qualifications - Bachelor's degree in Cybersecurity, Computer Science, or equivalent field; or 7+ years of hands-on cybersecurity experience with track record in leading and resolving complex security incidents - Exceptional communication skills, with the ability to articulate complex technical concepts to executive-level audiences both verbally and in writing - Experience in building and developing high-performing security response teams, including implementing performance measurement mechanisms - Demonstrated proficiency in identifying common security risks and developing/executing comprehensive security strategies - Strong problem-solving skills and ability to drive projects forward in ambiguous situations Preferred Qualifications - Leadership experience in Security Operations, including coordinating responses to security incidents or working in a Security Operations Center (SOC) environment - Proficiency with AWS security technologies, including: (VPC Flow Logs, CloudTrail, Amazon GuardDuty) - Background in customer support, client/stakeholder management, incident handling, or digital forensics - Understanding of how incident response impacts various compliance frameworks (e.g., ISO, HIPAA, FedRAMP) - One or more industry-recognized security certifications, such as: CISSP (Certified Information Systems Security Professional); CEH (Certified Ethical Hacker), CISA (Certified Information Systems Auditor), CISM (Certified Information Security Manager), GCIH (GIAC Certified Incident Handler) - In-depth knowledge of Internet protocols, network architectures, and security design principles Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you're applying in isn't listed, please contact your Recruiting Partner. Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $143,300/year in our lowest geographic market up to $247,600/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.