- Extensive experience in Application or Product Security, SDLC Implementation, secure coding standards, and managing end-to-end Application security functions.
- Experience with AWS Security controls and technology
- Extensive knowledge of multiple Information Security domains and associated issues.
- 8-10 years of working experience with information security technologies and solutions.
- A strong team player with excellent analytical and consultative skills.
- Organizational skills with attention to task details, documentation and target dates.
- Strong written, oral, and interpersonal communication skills.
- Team orientated, willing to share knowledge and collaborate with peers.
- College diploma or university degree in the field of computer science or engineering and/or equivalent work experience.
Description
Amazon Prime Video is looking for a motivated and experienced leader to oversee the Service Protection and Application Security function reporting directly to the CISO of Prime Video. The team is tasked with protecting the Prime Video Service in 3 specific areas: 1) AWS security, 2) Application Security and Secure Development Lifecycle, 3) mobile and app security. The Service Protection group will work with development and engineering teams to improve the maturity in each of these respective areas. Key functions to provide will be security consulting on the use of AWS technologies, architectural approaches, deployment strategies, etc. Work with development teams to create acceptable secure coding guidelines, minimal security standards and secure deployment verification/governance processes. Engage in penetration testing of application layer specific technologies including selected playback devices in order to find undetected vulnerabilities.
Amazon Prime Video is looking for a motivated and experienced leader to oversee the Service Protection and Application Security function reporting directly to the CISO of Prime Video. The team is tasked with protecting the Prime Video Service in 3 specific areas: 1) AWS security, 2) Application Security and Secure Development Lifecycle, 3) mobile and app security. The Service Protection group will work with development and engineering teams to improve the maturity in each of these respective areas. Key functions to provide will be security consulting on the use of AWS technologies, architectural approaches, deployment strategies, etc. Work with development teams to create acceptable secure coding guidelines, minimal security standards and secure deployment verification/governance processes. Engage in penetration testing of application layer specific technologies including selected playback devices in order to find undetected vulnerabilities.
The ideal candidate must be a strong leader who can prioritize well, communicate clearly and compellingly and who understands how to drive a high level of operational and strategic excellence within a team and collaborate with a variety of internal and external business partners. The ideal candidate has a background in Application Security, SDLC implementations, AWS Security best practices and implementation.
Your Impact
- Develop and implement an AWS Security Program across Prime Video, ensuring best practices are utilized and development partners are implementing appropriate AWS controls.
- Maintain the strategic roadmap for Prime Videoâs Service Protection initiatives and measure program effectiveness
- Develop technical programs such as SDLC implementation, application security testing, service and application certification, and service incident response coordination.
- Lead service protection engagements end-to-end by coordinating security assessments, remediation planning, and secure development integration activities
- Establish and maintain relationships with Prime Video software engineers and product teams to collect requirements for security capabilities and projects
- Partner with Information Security team on Application Security requirements and program development
- Partner with Training and Engineering teams to improve and expand guidance, education, and tools for software engineers
- Ensures all secure code standards are adhered to throughout project execution
- Maintains effective working relationships with peers to seamlessly integrate new assessment services with overall objectives and activities
- Coordinates internal and external communication, issue resolution, testing plans, training plans, and successful transition to additional security teams
- Act as subject matter expert for best in application security practices
- Mobile application security experience
- Excellent verbal and written communication skills
- Proven track record of recruiting, building and managing high performing teams
- Experience using Six Sigma methodologies to drive process improvement
- Ability to travel nationally and internationally as needed
Amazon is an Equal Opportunity Employer â Minority / Women / Disability / Veteran / Gender Identity / Sexual Orientation / Age
Find one job in US 