Security Engineer, WWPS Solutions Architecture

Description

Amazon Web Services is looking for a security‑focused Engineer for the Controlled Working Environment (CWE) program. We are seeking an experienced and motivated Security Engineer (Sec Eng) to expand our Security Operations Center (SOC) and maintain security compliance in this working environment. The right candidate must thrive in high‑pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right time frames to mitigate risks.

We are looking for an individual with a deep understanding of how to balance business and technical risk that can effect the program. The candidate should be able to identify IT risks, define a mitigation plan to remediate, and consistently drive for the right results. They must have a passion for engineering novel solutions to complex security challenges, and recognize and fill gaps in capabilities.

The ability to quickly design and build internal‑facing tools that enable scaled programmatic automation is a plus.

We value broad and deep technical knowledge, specifically in the fields of Windows forensics, Cloud security, security operations, incident response, network security, and emergent security intelligence.

• Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future.
• Design and coordinate cohesive responses to security events that involve multiple teams across the organization.
• Build security utilities and tools that enable the team to operate at high speed and wide scale.
• Evaluate the impact of current security threats, advisories, publications, and academic research to the organization. Identify plans of action and coordinate as necessary across teams to mitigate risk.
• Ability to communicate effectively at different levels of sensitivity, knowledge, and audiences.
• Recognize, adopt, and instill the best practices of security engineering throughout the organization.
• Fulfill regular on‑call responsibilities.

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object‑oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language (non‑internship).
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non‑internship).
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Knowledge of industry‑based security vulnerabilities and remediation techniques.
• Experience in scripting, programming, and security code reviewing in a common programming language (non‑internship).
• BS degree in computer science, computer engineering, or related field, or 4+ years of technical work experience.
• 3+ years of any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing experience.
• Experience in enterprise software.
• Experience with Windows and Linux operating systems.
• Experience architecting, securing, and operating Amazon Web Services.
• Must be a U.S. citizen.

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience.
• 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++.
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks.
• Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP.
• Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++.
• CISSP, CISA, CISM or other security certification, or GCIH (GIAC Certified Incident Handler), GSEC (GIAC Security Essentials), or Security+.
• Experience in written and oral communication,…