Sr. Security Engineer, Stores Application Security

- Creating, updating, and maintaining threat models for a wide variety of software projects - Security architecture and design guidance - Manual and Automated Secure Code Review, primarily in Java, Python and Javascript - Development of security automation tools - First party application security research - Adversarial security analysis using innovative tools to augment manual effort - Security training and outreach for internal development teams - Independently solve security problems that require novel methods or approaches - Influence your team’s and partners’ process, priorities, and choices to improve outcomes - First party application security research BASIC QUALIFICATIONS - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - Experience working in identifying security issues and risks, and developing mitigation plans - Experience as a mentor, tech lead or leading an engineering team - BS in Computer Science, Information Security, 5+ years of demonstrated experience in areas such as application security, offensive security and/or systems security and have a strong application security background with a focus on scalable solutions - Solid understanding of threat modeling, design and architecture review, manual source code review, security vulnerabilities, attacker exploit techniques, and methods for their remed PREFERRED QUALIFICATIONS - Experience applying threat modeling or other risk identification techniques or equivalent - Experience with security in service-oriented architectures/microservices and web services - Demonstrated strong judgment in assessing and prioritizing technical risk, with a solid application security background and a focus on scalable solutions. - Proven experience designing, building, and securing complex AWS architectures. - Excellent written and verbal communication skills, with the ability to conve

Amazon is a global technology company operating in e-commerce, cloud computing (AWS), digital streaming, advertising and artificial intelligence. Its India operations span development centres in Bengaluru, Hyderabad, Chennai, Pune, Gurugram and Mumbai, covering retail technology, AWS infrastructure, Alexa, advertising, payments and supply-chain systems.