Security Engineer - Incident Response, Kuiper Security Controls and Assurance

Description

Project Kuiper is Amazon's low Earth orbit satellite broadband network. Its mission is to deliver fast, reliable internet to customers and communities around the world, and we've designed the system with the capacity, flexibility, and performance to serve a wide range of customers, from individual households to schools, hospitals, businesses, government agencies, and other organizations operating in locations without reliable connectivity.

Export Control : This position requires that the candidate selected be a U.S. Citizen in order to comply with U.S. government-imposed requirements related to the nature of the work and / or where it will be performed.

We are looking for a Skilled, qualified and experienced leader in security assurance, with experience in automating security controls per compliance requirements.

As part of the Kuiper Enterprise Technology team, be seen as an expert in delivering Kuiper control systems and processes to meet Kuiper security and compliance standards. Be a key liaison with Kuiper service teams, infrastructure teams, Kuiper Security, and Global Trade and Compliance. Have the ability to dive deep, understand, document, communicate and implement controls for IT systems and processes, and be able to drive innovative process changes and automation throughout the Kuiper organization.

You are someone who loves working across many stakeholders to design solutions for complex compliance challenges. You will be a be part of a growing team that analyzes and implements Kuiper security controls

You will have an opportunity to work across the entire Kuiper organization implementing and managing various security controls along side of Kuiper Security. Kuiper security owns policy and definition of controls, this role owns the coordination, development, implementation, and change management of controls as well as managing defects and improvements.

Key job responsibilities

Responding to security incidents, and coordinating a cohesive response involving multiple teams across Kuiper

Providing security engineering solutions and support during customer-facing incidents, proactively considering the prevention of similar incidents from occurring in the future.

Assisting in the development of pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk.

Identifying and recommending solutions that improve or expand Amazon's incident response capabilities.

Working alongside Security Engineers to improve security, and to reduce and quickly address risk.

Evaluating the impact of current security trends, advisories, publications, and coordinating response as necessary across affected teams.

Keeping your knowledge and skills current with the rapidly changing threat landscape.

24 / 7 on-call responsibilities on rotation.

Basic Qualifications

3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience

2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience

2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience

Bachelor's degree in computer science or equivalent

Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security

Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience

Knowledge of networking protocols such as HTTP, DNS and TCP / IP

Knowledge of industry-based security vulnerabilities and remediation techniques

Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)

Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)

Preferred Qualifications

2+ years of any combination of the following : threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience

2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience

Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks

Knowledge of networking protocols such as HTTP(S), DNS, and TCP / IP

Knowledge of networking protocols, to include HTTP(S), DNS, and TCP / IP

Experience with AWS products and services

Experience with programming languages such as Python, Java, C+- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C+- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit for more information. If the country / region you're applying in isn't listed, please contact your Recruiting Partner.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000 / year in our lowest geographic market up to $212,800 / year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and / or other benefits. For more information, please visit . This position will remain posted until filled. Applicants should apply via our internal or external career site.