OverviewSecurity Engineer, Kuiper Security Controls and Assurance. Project Kuiper is Amazon’s low Earth orbit satellite broadband network. Its mission is to deliver fast, reliable internet to customers and communities around the world, with a system designed to serve a wide range of customers from households to government agencies.Export Control: This position requires that the candidate selected be a U.S. Citizen in order to comply with U.S. government-imposed requirements related to the nature of the work and/or where it will be performed.We are looking for a highly autonomous person with a technical background to analyze and implement Kuiper controls. As part of the Kuiper Enterprise Technology team, you will deliver Kuiper control systems and processes to meet security and compliance standards. You will coordinate with Kuiper service teams, infrastructure teams, Kuiper Security, and Global Trade and Compliance to understand, document, communicate, and implement controls for IT systems and processes, driving innovative process changes and automation throughout Kuiper.We value collaboration across stakeholders to design solutions for complex compliance challenges. The team fosters ownership, diversity, inclusion, and innovation, and encourages a high degree of ownership for program vision and ideas. You will work across the Kuiper organization implementing and managing controls alongside Kuiper Security, with the role owning coordination, development, implementation, and change management of controls as well as managing defects and improvements.ResponsibilitiesUnderstand and implement ISO 27001, NIST, and other security controlsUnderstand threat modeling, manual source code review, security vulnerabilities, attacker exploit techniques, and remediation methodsAssist certifications and assessments by liaising with Kuiper Security, auditors, and service teams, articulating control implementation and impact, and documenting proceduresEstablish credibility and maintain relationships with Information Security and compliance groups (Kuiper Sec, Info Sec, Legal, Internal Audit, Physical Security, Developer Community, Networking, Systems, etc.)Identify automation opportunities across engineering teamsDrive continuous improvements to the Kuiper compliance program, program management processes, and control projects in coordination with service teams and Kuiper SecurityCapture and track information security metrics and goals for all required controlsDevelop dashboards, canaries, and alarms for automated controlsCommunicate vision, deliverables, and project status to management and key stakeholdersDeliver recommendations and risk interpretations in a clear, audience-specific formatBasic Qualifications3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or similarBachelor’s degree in computer science or equivalentKnowledge of networking protocols such as HTTP, DNS, and TCP/IPPreferred Qualifications2+ years in threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network securityExperience with AWS products and servicesExperience with programming languages such as Python, Java, C++Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on factors including market location and job-related knowledge, skills, and experience. Amazon is a total compensation company. Depending on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total package with a full range of benefits. For more information, visit https://www.aboutamazon.com/workplace/employee-benefits . This position will remain posted until filled. Applicants should apply via our internal or external career site.
#J-18808-Ljbffr