Audible, Inc Audible.com (a wholly owned subsidiary of Amazon.com) is the Internet's leading provider of spoken audio programming including books of any genre, magazines, radio shows, daily newspapers, and more. Audible apps for your tablet or smartphone make it easy to listen wherever you are. Catch a caper while commuting in your car, add a little romance to a run, or maybe savor a mystery while making minestrone.
Audible Information Security team is looking for a Security Engineer to join our world class team. We are obsessed with protecting customer trust. We are a hands-on team working to protect our computer networks, servers, and applications. You will get the opportunity to work on the biggest and the fastest e-commerce platform in existence, Mobile Apps and the cloud infrastructure. You will work in the trenches with other Security Engineers, Application Developers and System Engineers to protect our customers and Audibles business.
KEY RESPONSIBILITIES
· Preserve Audible and Amazon customer trust
· Take a leadership role in driving internal security and privacy initiatives
· Provide guidance on secure design and conduct security reviews to critical Audible applications and services
· Perform 3P security assessment and reviews
· Provide guidance on security solutions to protect applications, systems, and networks
· Provide guidance on risk, compliance, and policy to leadership
· Respond to security violations, vulnerabilities, and incident detections
· Evangelize security within Audible by contributing to Security Education Training and Awareness campaigns
BASIC QUALIFICATIONS
· BS in Engineering or Computer Science
· 5+ years of application security experience
· Certifications in CCCP, CISSP, or GSEC
· Experience with Incident Response
· Governance, Risk, and Compliance experience
PREFERRED QUALIFICATIONS
· Great interpersonal and communications skills and the ability to liaison for both technical and non-technical audiences
· Experience with AWS w/ concentration on AWS Security Services (IAM, VPC/NACLS/SG, GuardDuty, Inspector, KMS, WAF & Shield, and AWS Well-Architected best practices
· Experience with Web Application Architecture Security Review, Threat Modeling, Static Code Review, Penetration Testing, and Incident Response Planning
· Experience with third party risk analysis and management
· Current knowledge around web and mobile application vulnerabilities, attacks, and mitigation methods
· Strong understanding of information security principles and core technologies (CIA, encryption, identity, authN/authZ, SSO, Networking, web protocols, and privacy)
· Strong understanding of web and mobile application security best practices and secure architecture patterns
· Experience with Mobile Security Review and Testing (iOS or Android)
· Experience with security testing tools: BurpSuite, ZAP, AppScan, SQLMap, Wireshark/TCPdump, Metasploit, Security Monkey, Curl, etc.
· Proficient in one programming language Java preferred
· Proficient in scripting language(s)
Audible is an Equal Opportunity Employer Minority / Women / Disability / Veteran / Gender Identity / Sexual Orientation / Age
by via developer jobs - Stack Overflow
No comments:
Post a Comment