Security Engineer II, Device Platform Security Team

Amazon • Sunnyvale, CA

1d

About The Position

Are you interested in being part of a top-notch security team covering all
Amazon devices? If you want to keep customers safe, then we have a job for you!
Amazon’s Device Security Platform team is growing and looking for strong
leaders.

In this role, you will work in the OS platform Security team for Amazon devices
like Echo, FireTV, Fire tablets, Ring and Blink doorbells, cameras, drones,
wearables, Kindle readers, and automotive security.

DSS is responsible for empowering and enabling the organizations of Amazon
Devices to develop and build secure products, including responding to public
vulnerabilities and reviewing or co-developing security features to protect
customers.

Amazon Security values diverse experiences. Even if you do not meet all of the
qualifications and skills listed in the job description, we encourage candidates
to apply. If your career is just starting, hasn’t followed a traditional path,
or includes alternative experiences, don’t let it stop you from applying.

At Amazon, security is central to maintaining customer trust and delivering
delightful customer experiences. Our organization is responsible for creating
and maintaining a high bar for security across all of Amazon’s products and
services. We offer talented security professionals the chance to accelerate
their careers with opportunities to build experience in a wide variety of areas
including cloud, devices, retail, entertainment, healthcare, operations, and
physical stores

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI
events and learning experiences inspire us to continue learning and to embrace
our uniqueness. Addressing the toughest security challenges requires that we
seek out and celebrate a diversity of ideas, perspectives, and voices.

We’re continuously raising our performance bar as we strive to become Earth’s
Best Employer. That’s why you’ll find endless knowledge-sharing, training, and
other career-advancing resources here to help you develop into a better-rounded
professional.

We value work-life harmony. Achieving success at work should never come at the
expense of sacrifices at home, which is why flexible work hours and arrangements
are part of our culture. When we feel supported in the workplace and at home,
there’s nothing we can’t achieve.

Requirements

• Bachelor's degree in computer science or equivalent, or experience in IT Security
• 3+ years of industry work experience
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Knowledge of operating system internals, with emphasis on Linux and common RTOS environments
• Experience with network security and authentication protocols, cryptography, and application security
• Security code review experience in C

Nice To Haves

• Experience applying threat modeling or other risk identification techniques or equivalent
• Knowledge of Android OS internals
• Experience with coding and code reviews in C/C++, assembly languages and scripting (e.g. , Ruby, Perl, Python, Bash)
• Experience and involvement with development team(s) that delivered commercial software, services, or hardware devices
• Experience with fundamentals of common wireless connectivity protocols (e.g. Bluetooth, WiFi, Zigbee, Thread)
• Knowledge of hardware security mechanisms, including secure boot and trusted execution environments

Responsibilities

• Help guide the software development lifecycle of devices at Amazon, from security design, threat modeling to code reviews, security testing and fuzzing
• Be responsible for analyzing the security of the platform components of consumer devices
• Propose, research and develop tools and techniques to improve the security posture of devices at scale
• Provide technical security expertise and consultation to device product teams
• Identify security risks and work with product engineers to create mitigations
• Develop new security policies and procedures
• Empower others to improve their security acumen by promoting awareness and developing training materials

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level