The Amazon Security (AmSec) team is searching for a Security Industry Specialist for its Prototype Security Investigations team who is able to develop, implement and lead security projects and programs to support Amazon's prototype device teams.
This position will provide security investigation support to all Amazon consumer electronic devices prior to release to the general public and support the overall prototype investigations posture for the Amazon Devices & Services Organization.
The Amazon Devices Organization designs and engineers high-profile consumer electronics, including the best-selling Kindle family of products as well as devices like Fire tablets, Fire TV, Amazon Astro, and Amazon Echo.
This role will have a global reach and focus to ensure consistent prototype security investigations are provided and executed to all prototypes reported as lost or misplaced.
In this position, the Prototype Security Investigator will have regular engagement with all product lines of business to create and foster an engagement model to ensure security has a seat at the table with all Amazon Devices & Services Organization product lines.
To be successful in this position, the Prototype Security Investigator must have the ability to understand the Amazon prototype development process, build strong relationships with key business teams, independently identify process failures, and provide suggested risk mitigation solutions. This role will have a region-wide reach and focus to ensure consistent prototype security investigations are provided and executed to all prototypes reported as lost or misplaced with a given geographical region.
This position will report to the Amazon Security, Prototype Security Investigations Manager.
Key job responsibilities
Investigation Leadership & Execution:
• Serve as the primary security point of contact and escalation for all prototype investigations within assigned region
• Conduct complex investigations into prototype device losses, unauthorized disclosures, and marketplace diversion cases following industry-standard forensic and evidence handling procedures
• Partner with Enterprise Protection Program (EPP) and legal teams to ensure investigation methodologies meet evidentiary standards
Program & Process Development:
• Design and implement investigation frameworks and protocols that meet legal and regulatory requirements
• Create and maintain investigation documentation and chain of custody processes that satisfy external audit requirements
• Optimize cross-functional processes to improve security-focused projects and goals
• Discover and leverage existing solutions to enhance project and process efficiency
Risk Management & Mitigation:
• Conduct security risk and vulnerability assessments from root cause analysis of lost device investigations
• Design and implement mitigation strategies to reduce device losses and intellectual property risks
• Handle complex security and compliance programs, managing visible risks and roadblocks
• Use expertise to implement straightforward solutions with limited guidance
Metrics & Reporting:
• Establish metrics and reporting to demonstrate effectiveness of security investigation controls
• Write reports evaluating and analyzing metrics to support risk-based prioritization of solutions
Training & Development:
• Lead the development and delivery of security education materials and programs
• Mentor junior team members and advise peers on best practices in prototype security
• Stay current with industry standards and external practices related to prototype security
Business Partner Management:
• Work across teams within Amazon Security to influence goals, priorities, and trade-offs
• Communicate technical and industry knowledge effectively to engineering, program management, and business teams
A day in the life
• Case Review and Prioritization for leak and unauthorized disclosure investigations
• Evidence Collection and Analysis
• Documentation and Reporting
• Collaboration and Communication
• Continuous Learning and Professional Development
About the team
The Prototype Security Investigations team (PSI) aims to mitigate unauthorized intellectual property (IP) disclosure, prototype device loss and theft, and non-compliance with the Acceptable Use Policy. We reduce risk to Amazon IP, make informed decisions to decrease intellectual property loss, and support regulatory requirements. We identify process gaps and failures and use risk-based prioritization to address issues that pose the highest risk to Amazon's intellectual property.
BASIC QUALIFICATIONS
- Experience in Incident Management, Threat Management, Corporate Investigations, Law Enforcement, Security Operations, Crisis Management or a related field that involves conducting threat assessments, workplace investigations, and/or incident response
- Experience in conducting investigative work, including claimant, witness, and target employee interviews, investigative data analysis, and production of investigative documentation
- Domestic and international travel may be required (25-35% of time).
- 3+ years of experience using a case management system and data analysis software to investigate system failures, uncover root causes, and driving resolution.
PREFERRED QUALIFICATIONS
- Lean Six Sigma Green Belt or Black Belt certification
- professional certification in information security (SANS GIAC, CISSP, or equivalent)
- Experience that includes strong analytical skills, attention to detail, and effective communication abilities
- Naturally curious and tenacious to dive deep into issues to get to the root cause of the system failure(s).
- Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business Understanding of reading statistics and how data is used to inform policies and procedures.
- MCFE, CPP, CPI, CISM, or PMP Certification.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, CA, Sunnyvale - 112,200.00 - 196,300.00 USD annually
