DESCRIPTION
Job summary
Amazon Payments Services build systems that process payments at an unprecedented scale, with accuracy, speed, and mission-critical availability. We process millions of transactions every day worldwide across various payment methods. Hundreds of millions of customers and merchants send hundreds of billions of dollars moving at light-speed through our systems annually. We are growing a new team to innovate and provide a seamless payment experience to our customers across all platforms like mobile, web, voice etc.
We are looking for a highly skilled, experienced, and motivated senior security engineer to join our Application Security team. This team owns all aspects of security for the features in the next generation of Amazon's core payments platform.
Key job responsibilities
As a security engineer in Payments Security, you will:
· Secure the design and implementation of the most critical systems within Amazon's core payments platform
· Solve security challenges at a massive scale in a security-first, infrastructure as code, 100% AWS environment
· Partner closely with our development teams to produce innovative and secure solutions
· Proactively perform security assessments to prevent security vulnerabilities
· Perform security testing before release
· Conducting trainings and hackathons to raise developer awareness of security best practices
· Be expected to be strong in multiple domains and will be sought out for advice on technical issues,
· Have excellent time management skills along with the ability to deliver results in the face of uncertainty
BASIC QUALIFICATIONS
BS in computer science, networking, information systems, computer engineering, or 4+ years’ equivalent experience
Minimum of 4 years’ experience in identifying security issues and risks, and developing mitigation plans
Minimum of 2 years’ experience in software architecture, design, implementation
Minimum of 2 years’ experience in areas such as cryptography, application security, threat modeling, penetration testing
Minimum of 2 years' scripting or programming experience in Java, Python, Perl, Scala, or other languages
Experience performing secure code review
Hands-on experience using and/or securing AWS or other cloud computing environments
Experience in executive communications or technical writing; clear, concise, and thorough written and oral communication skills.
Results oriented, high energy, self-motivated
PREFERRED QUALIFICATIONS
· Hands-ons experience designing and/or securing on-premise or AWS network infrastructure
· Experience with multiple programming languages (such as, Java, Python, C++, Scala, etc.) ·
· Experience with vulnerability risk and impact assessment
· Experience in driving large, cross-organization initiatives
· Ability to make concrete progress in the face of ambiguity and imperfect knowledge (avoid “analysis paralysis”)
· Strong information security risk-based prioritization abilities