HN user

z1g1

14 karma

Strange women lying in ponds distributing swords is no basis for a system of govt. Security Engineer w @AWS_Security, table/video/board gamer. Posts are my own

https://twitter.com/z1g1

Posts0
Comments8
View on HN
No posts found.

Amazon Web Services security team is hiring.

Locations: Seattle WA, North Virginia, Dublin Ireland (EU), Sydney Australia

We're looking for security-minded engineers at various skill levels. Our positions range from support engineers (who we expect to have a good technical depth, but not necessarily a security focus) to principal engineer (capable of running a security campaign across 100s of thousands of servers and 10s of thousands of employees.

[edit: linebreaks] Key focus areas include:

- Recognize, adopt, utilize and teach best practices in security engineering: secure development, cryptography, network security, security operations, systems security, policy, and incident response.

- Collaborate to ensure that decisions are based on the merit of the proposal, not the proposer. When none of the proposals is the obvious winner, you are still decisive, able to disagree and commit to the team’s decision

- Demonstrate high capacity and tolerance for extreme context switching and interruptions while remaining productive and effective

- Participate in efforts to promote security throughout the Company and build good working relationships within the team and with others across Amazon

- Partner with teams throughout the Company to develop pragmatic solutions that achieve business requirements while maintaining an acceptable level of risk

- Solve problems at their root, stepping back to understand the broader context

- Maintain an understanding of the Internet threat environment and how it affects the company

- Find and fix flaws in existing company systems and sites

- Leverage current state of network and application security tools and how they can benefit the company

- Maintain knowledge and skills required to keep up with the rapidly changing threat landscape

- Participate in efforts that create and improve the company’s security policies

- Work under extended, extreme pressure, handle situations calmly and lead incident response teams effectively

- Proactively support knowledge sharing within the team and across the company

- Help recruit the very best people for Amazon through active participation in the overall recruiting process

- Large-scale security engineering Cloud security experience is obviously a plus, but not a firm requirement. Listings are available here: http://www.amazon.com/gp/jobs/ref=j_sq_btn?jobSearchKeywords... Or PM me and I can provide a professional reference.

Hopefully the author will see this, but please make sure to add a note to add the settings.py to the .gitignore file. If your AWS creeds are committed to github anyone can have access to your AWS account

I would be interested to see what the HN crowd's opinion on certifications are. Mr. Schneier mentions them in his post but they seem to be a sticking point in the community as a whole. I have been on the hunt for ~2-3 months now without luck so far. I am currently working on my CISSP though I don't have the experience to qualify (CISSP requires 5+ I only have 2+) for it so even if I pass I can only qualify for the associate level.

I'm not sure if the CISSP is the way to go but I want to feel as if I am moving forward on a career search so I don't get stuck in a rut.