Job Description
Security Operations Engineer, AWS Security Cloud Response
Job Description:
We are looking for a focused Security Engineer who can take on a leadership role in responding to security issues across the largest cloud provider in the world. The right candidate must thrive in high-pressure situations, think like both an attacker and defender, and drive relevant teams to take the right actions in the right timeframes to mitigate risks.
Key Responsibilities:
* Confidently and intelligently respond to security incidents, and proactively consider how to prevent the same type of incidents from occurring in the future.
* Design and coordinate cohesive responses to security events that involve multiple teams across the organization.
* Build security utilities and tools for internal use that enable you and your fellow Security Engineers to operate at high speed and wide scale.
* Evaluate the impact to the organization of current security trends, advisories, publications, and academic research.
* Communicate effectively at multiple levels of sensitivity, and multiple audiences.
* Recognize, adopt, and instill the best practices in security engineering fields throughout the organization.
* Provide subject matter expertise on architecture, authentication, and system security.
* Fulfill regular on-call responsibilities.
A Day in the Life:
AWS Cloud Response is responsible for the security of AWS Cloud services. Our primary focus is to ensure the security of the cloud by working with service teams, vendors, and other stakeholders to solve security challenges at massive scale.
Basic Qualifications:
* Bachelor's degree in computer science or equivalent
* Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
* Experience programming in Python, Ruby, Go, Swift, Java, .NET, C++, or similar object-oriented language
* Information security professional certification
* Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
* Experience applying threat modeling or other risk identification techniques or equivalent
* Experience implementing security solutions at the business division level or equivalent