Security engineer
This role is open to alternative locations including : Seattle, WA - Herndon, VA Arlington, VA Atlanta, GA - Austin, TX
Are you interested in security and supporting the tools and processes for a penetration testing team? Do you strive to understand systems, software, and services deeply in order to break them?
Do you find yourself automating away your work every single day? As a Security Engineer you will solve complex technology problems and build tools to automate your way out of manual efforts.
Our team is responsible for the manual assessment of all products, services and software released by AWS. To accomplish this, we support and write a variety of automated tooling (e.
g. fuzzers, scanners, analyzers, etc.) to verify security fixes related to penetration testing. We specialize in digging deep to find security issues that static analysis tools can’t, and write the tooling to help with these goals whenever possible.
The AWS surface area is large and diverse, and we use results found in manual analysis to help improve our enterprise-wide automation to proactively spot and fix potential security issues to protect customers.
We are looking for a Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards.
You will be responsible for automating repetitive tasks using various scripting languages. As a security engineer, you will also work with our penetration testing team to learn their work, reproduce, and recommend solutions.
We would look to you to help write automation to improve processes and work directly with internal teams to solve challenging software problems.
Key job responsibilities
- Automate the verification and remediation of security issues
- Manually audit the source code of web services and software authored in house by Amazon
- Write proof of concept code to demonstrate the severity of a potential security issue
- Provide clear communication on issues to developers that suggest and help to test the fix
- Partner with AWS developers to drive improvement in application security as a result of security review engagements
- Provide actionable long term risk mitigation guidance
About the team
Inclusive Team Culture
Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally.
We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences.
Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.
Work / Life Balance
Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life.
We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment.
We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives.
Mentorship & Career Growth
Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship.
We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.
BASIC QUALIFICATIONS
- A Bachelor’s degree in Computer Science, Cybersecurity, similar degree, or equivalent professional experience can be used in lieu of a degree.
- Minimum of 1 years of experience with manually auditing source code (One or more of : Java, Ruby, Python, JavaScript, Rust, C, others) to find security issues.
- Minimum of 1 years of experience scripting in Python or other equivalent interpreted languages.
- Minimum of 1 years of professional experience with security engineering practices such as in web application security, network security, authentication and authorization protocols, cryptography, automation and other software security disciplines.
PREFERRED QUALIFICATIONS
- Experience with AWS technologies and services (e.g. S3, Lambda, EC2, KMS, IAM, etc.)
- Experience with bug hunting, bug bounties, capture the flag, software development
- Experience with multiple programming languages
- Meets / exceeds Amazon’s leadership principles requirements for this role
Related Jobs
Security engineer
This role is open to alternative locations including : Seattle, WA - Herndon, VA Arlington, VA Atlanta, GA - Austin, TX
Are you interested in security and supporting the tools and processes for a penetration testing team? Do you strive to understand systems, software, and services deeply in order to break them?
Do you find yourself automating away your work every single day? As a Security Engineer you will solve complex technology problems and build tools to automate your way out of manual efforts.
Our team is responsible for the manual assessment of all products, services and software released by AWS. To accomplish this, we support and write a variety of automated tooling (e.
g. fuzzers, scanners, analyzers, etc.) to verify security fixes related to penetration testing. We specialize in digging deep to find security issues that static analysis tools can’t, and write the tooling to help with these goals whenever possible.
The AWS surface area is large and diverse, and we use results found in manual analysis to help improve our enterprise-wide automation to proactively spot and fix potential security issues to protect customers.
We are looking for a Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards.
You will be responsible for automating repetitive tasks using various scripting languages. As a security engineer, you will also work with our penetration testing team to learn their work, reproduce, and recommend solutions.
We would look to you to help write automation to improve processes and work directly with internal teams to solve challenging software problems.
Key job responsibilities
- Automate the verification and remediation of security issues
- Manually audit the source code of web services and software authored in house by Amazon
- Write proof of concept code to demonstrate the severity of a potential security issue
- Provide clear communication on issues to developers that suggest and help to test the fix
- Partner with AWS developers to drive improvement in application security as a result of security review engagements
- Provide actionable long term risk mitigation guidance
About the team
Inclusive Team Culture
Here at AWS, we embrace our differences. We are committed to furthering our culture of inclusion. We have ten employee-led affinity groups, reaching 40,000 employees in over 190 chapters globally.
We have innovative benefit offerings, and host annual and ongoing learning experiences, including our Conversations on Race and Ethnicity (CORE) and AmazeCon (gender diversity) conferences.
Amazon’s culture of inclusion is reinforced within our 16 Leadership Principles, which remind team members to seek diverse perspectives, learn and be curious, and earn trust.
Work / Life Balance
Our team puts a high value on work-life balance. It isn’t about how many hours you spend at home or at work; it’s about the flow you establish that brings energy to both parts of your life.
We believe striking the right balance between your personal and professional life is critical to life-long happiness and fulfillment.
We offer flexibility in working hours and encourage you to find your own balance between your work and personal lives.
Mentorship & Career Growth
Our team is dedicated to supporting new members. We have a broad mix of experience levels and tenures, and we’re building an environment that celebrates knowledge sharing and mentorship.
We care about your career growth and strive to assign projects based on what will help each team member develop into a better-rounded professional and enable them to take on more complex tasks in the future.
BASIC QUALIFICATIONS
- A Bachelor’s degree in Computer Science, Cybersecurity, similar degree, or equivalent professional experience can be used in lieu of a degree.
- Minimum of 1 years of experience with manually auditing source code (One or more of : Java, Ruby, Python, JavaScript, Rust, C, others) to find security issues.
- Minimum of 1 years of experience scripting in Python or other equivalent interpreted languages.
- Minimum of 1 years of professional experience with security engineering practices such as in web application security, network security, authentication and authorization protocols, cryptography, automation and other software security disciplines.
PREFERRED QUALIFICATIONS
- Experience with AWS technologies and services (e.g. S3, Lambda, EC2, KMS, IAM, etc.)
- Experience with bug hunting, bug bounties, capture the flag, software development
- Experience with multiple programming languages
- Meets / exceeds Amazon’s leadership principles requirements for this role
Security Engineering Manager
Good storytelling starts with great listening. At Audible, that means each role and every project has our audience in mind.
Because the same people who design, develop, and deploy our products also happen to use them. To us, that speaks volumes.
ABOUT THIS ROLE
As a leader in of Audible’s Information Security team, you are integral to the smooth operations of the overall information security and cybersecurity program.
You will work with executive stakeholders across the company to codify and retire risks, identify and close vulnerabilities and respond to incidents with speed and zeal.
You are a primary point of communication and escalation in matters of Information Security.
ABOUT YOU
You possess deep (depth and breadth) technical expertise in application security, data protection, third party / supply chain risk, incident response, as well as security policies, standards and regulations (for example, GDPR, CCPA).
As such, you will be a sought-after leader across the organization. You are refreshing in your understanding of the evolving landscape of threats and the security technology and techniques used to combat them.
You bring this passion to your work and your team and as a result, continuously raise the bar for Information Security at Audible
You are adept at written and verbal communication and can successfully communicate technical concepts to technical and non-technical audiences alike.
You will use this skill to earn trust throughout the company and to advocate for your team and its mission
As a Security Engineering Manager, you will...
- Hire, develop and lead a talented team of Cyber Security engineers and risk managers as they partner with software engineers and business team members to deliver secure products and services to our users world-wide
- Ensure that the entire organization learns and lives Audible’s information security policies
- Drive compliance through evangelizing, partnership, and education, as well as a robust program of third party / vendor reviews, incident response, application and data security reviews, threat modeling and risk posture, penetration testing, bug bounty, and proactive assessment, auditing, and governance of data protection, data leakage, least privilege, and data privacy controls
- Create, measure, and persistently track key risk metrics. Use these metrics to demonstrate to the organization that we are meeting our objectives through monthly and quarterly reviews
ABOUT AUDIBLE
At Audible, we innovate and inspire through the power of voice. We're changing the narrative on storytelling. As a leading creator and provider of premium audio storytelling, we've redefined the ways people access, discover, and share stories.
The stories we tell have the ability to transport and transform everyday moments into meaningful experiences and it's our people who make Audible's service possible.
We're listeners, storytellers, and problem-solvers. Our perspectives and experiences power our ideas and come together in our mission to unleash the power of the spoken word.
Audible offers a Hub+Home hybrid workplace model that gives employees flexibility between gathering in an Audible workspace (work from hub) and remote work (work from home).
For more information, please visit adbl.co / hybrid.
BASIC QUALIFICATIONS
- Bachelor's degree in Cyber Security, Computer Science, related field, or relevant information security experience
- 10+ years of industry experience with hands-on security engineering experience
- 10+ years of risk assessment and enabling organizations making security decisions
- 5+ years managing and building teams (including coaching and mentoring)
PREFERRED QUALIFICATIONS
- MBA or Master’s degree
- CISSP, CISM, CISA or similar professional certification
- A self-starter who can take general direction and produce specific results. When the resources are not immediately at-hand, you enjoy reaching out to a wide array of functional groups across an organization to get the information you need
- Experience working with issues related to GDPR and privacy
- Experience with incident response preparedness and insider threat programs
- Strong analytical and quantitative skills with the ability to use data and metrics to back up recommendations and drive actions
- Experience triaging security risks / vulnerabilities and ensuring that they are properly understood and managed
- Excellent oral and written communication skills
Audible is committed to a diverse and inclusive workplace. Audible is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.
Security Engineering Manager
Good storytelling starts with great listening. At Audible, that means each role and every project has our audience in mind.
Because the same people who design, develop, and deploy our products also happen to use them. To us, that speaks volumes.
ABOUT THIS ROLE
As a leader in of Audible's Information Security team, you are integral to the smooth operations of the overall information security and cybersecurity program.
You will work with executive stakeholders across the company to codify and retire risks, identify and close vulnerabilities and respond to incidents with speed and zeal.
You are a primary point of communication and escalation in matters of Information Security.
ABOUT YOU
You possess deep (depth and breadth) technical expertise in application security, data protection, third party / supply chain risk, incident response, as well as security policies, standards and regulations (for example, GDPR, CCPA).
As such, you will be a sought-after leader across the organization. You are refreshing in your understanding of the evolving landscape of threats and the security technology and techniques used to combat them.
You bring this passion to your work and your team and as a result, continuously raise the bar for Information Security at Audible
You are adept at written and verbal communication and can successfully communicate technical concepts to technical and non-technical audiences alike.
You will use this skill to earn trust throughout the company and to advocate for your team and its mission
As a Security Engineering Manager, you will...
- Hire, develop and lead a talented team of Cyber Security engineers and risk managers as they partner with software engineers and business team members to deliver secure products and services to our users world-wide
- Ensure that the entire organization learns and lives Audible's information security policies
- Drive compliance through evangelizing, partnership, and education, as well as a robust program of third party / vendor reviews, incident response, application and data security reviews, threat modeling and risk posture, penetration testing, bug bounty, and proactive assessment, auditing, and governance of data protection, data leakage, least privilege, and data privacy controls
- Create, measure, and persistently track key risk metrics. Use these metrics to demonstrate to the organization that we are meeting our objectives through monthly and quarterly reviews
ABOUT AUDIBLE
At Audible, we innovate and inspire through the power of voice. We're changing the narrative on storytelling. As a leading creator and provider of premium audio storytelling, we've redefined the ways people access, discover, and share stories.
The stories we tell have the ability to transport and transform everyday moments into meaningful experiences and it's our people who make Audible's service possible.
We're listeners, storytellers, and problem-solvers. Our perspectives and experiences power our ideas and come together in our mission to unleash the power of the spoken word.
Audible offers a Hub+Home hybrid workplace model that gives employees flexibility between gathering in an Audible workspace (work from hub) and remote work (work from home).
For more information, please visit adbl.co / hybrid.
Basic Qualifications
- Bachelor's degree in Cyber Security, Computer Science, related field, or relevant information security experience
- 10+ years of industry experience with hands-on security engineering experience
- 10+ years of risk assessment and enabling organizations making security decisions
- 5+ years managing and building teams (including coaching and mentoring)
Preferred Qualifications
- MBA or Master's degree
- CISSP, CISM, CISA or similar professional certification
- A self-starter who can take general direction and produce specific results. When the resources are not immediately at-hand, you enjoy reaching out to a wide array of functional groups across an organization to get the information you need
- Experience working with issues related to GDPR and privacy
- Experience with incident response preparedness and insider threat programs
- Strong analytical and quantitative skills with the ability to use data and metrics to back up recommendations and drive actions
- Experience triaging security risks / vulnerabilities and ensuring that they are properly understood and managed
- Excellent oral and written communication skills
Audible is committed to a diverse and inclusive workplace. Audible is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.
For individuals with disabilities who would like to request an accommodation, please visit https : / / www.amazon.jobs / en / disability / us.
Security officer
We have an exciting opportunity to join our team as a Security Officer.
In this role, the successful candidate is responsible for providing security by protecting Medical Center patients, faculty, staff, students, and visitors and by preventing destructive acts to Medical Center property.
Job Responsibilities :
Investigates and follows-up on all incidents that compromise the safety and security of the Medical Center community or property.
Demonstrates investigative techniques appropriate to the situation. Demonstrates knowledge of appropriate contact person / department regarding identified hazards.
Assists in emergency situations as appropriate and according to Medical Center and Security Department policies and procedures.
Demonstrates the ability to gather facts and thoroughly assess the scene of an incident. Follows Security Department policies and procedures when interviewing subjects, suspects, and witnesses to an incident or when interviewing complainants.
Patrols Medical Center grounds and facilities in order to safeguard life and property. Performs various security checks to safeguard life and property.
Enforces Medical Center and Security Department policies and procedures as appropriate. Recognizes potentially hazardous situations and implements appropriate preventive measures.
Demonstrates knowledge of all security posts.
- Performs other duties as assigned.
- Prioritizes, completes and communicates assigned work. Completes assigned work by the end of the tour. Ensures effective coordination of departmental activities by informing department members of the current status of assigned work.
Demonstrates willingness and the ability to perform various work assignments competently. Willingness to take on additional assignments upon completion of assigned worked.
Communicates effectively with all departments, the Medical Center community and visitors. Maintains the integrity and confidentiality of information pertaining to the Medical Center including clinician and patient information.
Prepares reports as required. Composes written reports that are clear, complete and accurate. Completes reports in accordance with Security Department policies and procedures.
Submits reports to the supervisor on a timely basis.
Responds to the needs and requests for assistance from the Medical Center community and visitors. Provides a prompt and courteous response to requests and / or inquiries from Medical Center patients, visitors, faculty, staff and students.
Demonstrates an awareness of important issues that may underlie or impact the request, inquiry or response.
Minimum Qualifications :
- High School Diploma or the equivalent.
- Valid New York State Security Guard License.
- Effective oral, written communication and interpersonal skills.
- Drivers Permit upon hire (obtain drivers license within 4 months).
- BLS / CPR (In-person training) from American Heart Association or American Red Cross.
Required Licenses : Security Guard Reg-NYS, Driver's License, Basic Life Support Cert
Preferred Qualifications :
- Prior military / law enforcement experience or Fire Safety Director Certification a plus.
- Prior healthcare experience.
- Verbal and physical de-escalation training.
- Computer literate.
Qualified candidates must be able to effectively communicate with all levels of the organization.
NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.
NYU Langone Health is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment.
Security officer
NYU Langone Health is a world-class, patient-centered, integrated academic medical center, known for its excellence in clinical care, research, and education.
It comprises more than 200 locations throughout the New York area, including five inpatient locations , a children's hospital , three emergency rooms and a level 1 trauma center.
Also part of NYU Langone Health is the Laura and Isaac Perlmutter Cancer Center , a National Cancer Institute designated comprehensive cancer center, and NYU Grossman School of Medicine , which since 1841 has trained thousands of physicians and scientists who have helped to shape the course of medical history.
We embrace diversity, inclusion, and individual skills, ideas, and knowledge. For more information, go to nyulangone.org , a nd interact with us on LinkedIn , Glassdoor , Indeed , Facebook , Twitter , YouTube and Instagram .
Position Summary :
We have an exciting opportunity to join our team as a Security Officer.
In this role, the successful candidate is responsible for providing security by protecting Medical Center patients, faculty, staff, students, and visitors and by preventing destructive acts to Medical Center property.
Job Responsibilities :
Investigates and follows-up on all incidents that compromise the safety and security of the Medical Center community or property.
Demonstrates investigative techniques appropriate to the situation. Demonstrates knowledge of appropriate contact person / department regarding identified hazards.
Assists in emergency situations as appropriate and according to Medical Center and Security Department policies and procedures.
Demonstrates the ability to gather facts and thoroughly assess the scene of an incident. Follows Security Department policies and procedures when interviewing subjects, suspects, and witnesses to an incident or when interviewing complainants.
Patrols Medical Center grounds and facilities in order to safeguard life and property. Performs various security checks to safeguard life and property.
Enforces Medical Center and Security Department policies and procedures as appropriate. Recognizes potentially hazardous situations and implements appropriate preventive measures.
Demonstrates knowledge of all security posts.
- Performs other duties as assigned.
- Prioritizes, completes and communicates assigned work. Completes assigned work by the end of the tour. Ensures effective coordination of departmental activities by informing department members of the current status of assigned work.
Demonstrates willingness and the ability to perform various work assignments competently. Willingness to take on additional assignments upon completion of assigned worked.
Communicates effectively with all departments, the Medical Center community and visitors. Maintains the integrity and confidentiality of information pertaining to the Medical Center including clinician and patient information.
Demonstrates appropriate communication techniques to defuse tense or hostile situations. Listens carefully and responds in an appropriate and professional manner.
Prepares reports as required. Composes written reports that are clear, complete and accurate. Completes reports in accordance with Security Department policies and procedures.
Submits reports to the supervisor on a timely basis.
Responds to the needs and requests for assistance from the Medical Center community and visitors. Provides a prompt and courteous response to requests and / or inquiries from Medical Center patients, visitors, faculty, staff and students.
Demonstrates an awareness of important issues that may underlie or impact the request, inquiry or response.
Minimum Qualifications :
- High School Diploma or the equivalent.
- Valid New York State Security Guard License.
- Effective oral, written communication and interpersonal skills.
- Drivers Permit upon hire (obtain drivers license within 4 months).
- BLS / CPR (In-person training) from American Heart Association or American Red Cross.
Required Licenses : Security Guard Reg-NYS, Driver's License, Basic Life Support Cert
Preferred Qualifications :
- Prior military / law enforcement experience or Fire Safety Director Certification a plus.
- Prior healthcare experience.
- Verbal and physical de-escalation training.
- Computer literate.
Qualified candidates must be able to effectively communicate with all levels of the organization.
NYU Langone Health provides its staff with far more than just a place to work. Rather, we are an institution you can be proud of, an institution where you'll feel good about devoting your time and your talents.
NYU Langone Health is an equal opportunity and affirmative action employer committed to diversity and inclusion in all aspects of recruiting and employment.
All qualified individuals are encouraged to apply and will receive consideration without regard to race, color, gender, gender identity or expression, sex, sexual orientation, transgender status, gender dysphoria, national origin, age, religion, disability, military and veteran status, marital or parental status, citizenship status, genetic information or any other factor which cannot lawfully be used as a basis for an employment decision.
We require applications to be completed online.
If you wish to view NYU Langone Health's EEO policies, please click here . Please click here to view the Federal "EEO is the law" poster or visit https : / / www.
dol.gov / ofccp / regs / compliance / posters / ofccpost.htm for more information.
NYU Langone Health provides a salary range to comply with the New York City Law on Salary Transparency in Job Advertisements.
The salary range for the role is $49,043.75 - $56,483.75 Annually. Actual salaries depend on a variety of factors, including experience, specialty, education, and hospital need.
The salary range or contractual rate listed does not include bonuses / incentive, differential pay or other forms of compensation or benefits.
To view the Pay Transparency Notice, please click here
Required Skills
Required Experience