Apply on Employer Site

Amazon · 3 months ago

Sr. Security Engineer, AWS Center for Quantum Computing

Pasadena, California, USA

Full-time

Hybrid

Senior Level

$143K/yr - $248K/yr

5+ years exp

Amazon Development Center U.S., Inc. is seeking a Security Engineer for its AWS Center for Quantum Computing in Pasadena, CA. The role involves designing and overseeing security operations for R&D efforts, managing security projects, and ensuring the protection of research facilities and cloud infrastructure.

Artificial Intelligence (AI)DeliveryE-CommerceFoundational AIRetail

No H1B

U.S. Citizen Only

Responsibilities

Own the completion of a threat model and security plan for our research spaces

Lead an array of projects and security initiatives/activities designed to protect fellow Amazonians, R&D facilities, and critical cloud infrastructure from all categories of threats

Define, document, and educate policies/workflows for our labs, which span across academic, corporate, and industrial spaces

Work with internal stakeholders, academic and corporate partners to meet or exceed Amazon security bar

Understand software lifecycle on scientific equipment and mitigate physical and logical risks

Perform periodic reviews of software baselines and network activity

Manage security reviews of internally used, external-facing, or third-party applications

Create and maintain detailed inventories of sensitive hardware and software

Audit equipment and software before commissioning in a development or production environment

Qualification

Security engineeringThreat modelingRisk analysisSecurity code reviewScriptingProgrammingSecurity vulnerabilities identificationAccess control systemsCrisis managementTraining developmentMentoringEffective communication

Required

4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience

5+ years of work in identifying security issues and risks, and developing mitigation plans experience

4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience

Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language

Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools

Experience working in identifying security issues and risks, and developing mitigation plans

Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques

Experience as a mentor, tech lead or leading an engineering team

5+ years relevant security engineering work experience, or a Bachelor's degree in one of the following degree programs: Cybersecurity, Computer Science/Engineering, Electrical Engineering, Informatics, or related academic degrees

5+ years of professional work experience as a security expert in one or more of these areas: security engineering, scientific research, engineering research and development

Hands-on experience with security lifecycle activities including threat modeling, risk analysis, design review, and testing

Strong understanding of adversary TTPs and experience with threat detection, response, and recovery

Preferred

Experience applying threat modeling or other risk identification techniques or equivalent

Experience with security in service-oriented architectures/microservices and web services

Interest in learning Quantum Technologies

Effective teacher and instructor, with experience developing and delivering training to security, technical, and business professionals; Ability to develop and deliver security awareness training programs

Excellent written communication skills, with a focus on translating technically complex security issues into simple, easy to understand concepts for business and technical leadership; Experience writing and publishing security standards

Ability to manage tactical (daily) operations and participate in development of strategic program plans

Understanding of crisis operations, risk management, and crisis communication

Understanding of business continuity and incident command system

Strong working knowledge of access control systems and physical security systems/components

Experience in providing security oversight at data centers or research lab environments/equivalent