Job Description

Security Engineer Job ID: 2025547 | ADCI - Karnataka

DESCRIPTION Job summary
Are you passionate about data security? Would you like to be a part of the team responsible for building and managing a data security program for Whole Foods? We need exceptionally talented, bright, and driven people. Amazon-Whole Foods is the worlds largest provider of natural and organic groceries, and we are passionate about our mission, and protecting our customers information. We want someone ready to partner across Whole Foods Markets technology and security engineering groups to secure and protect data. The right person will lead implementation of cutting-edge technology and programs to ensure data is managed and protected end-to-end from when a customer submits that information, until we ultimately delete it from our systems.
We operate in a hyper-growth environment where priorities shift quickly, so passion and discipline around security and delivery is critical. You will tackle challenging situations every day and, given the size of this initiative, you will collaborate with various levels across Whole Foods Market and Amazon.
Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate based on race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/en/disability/us.

Key job responsibilities
The Data Protection Team under is responsible to reduce & mitigate the risks of uncontrolled information disclosure by eliminating unrequired data & migrate remaining to a secured solution. This includes Securing Mass storages for global region, regional offices and stores. Implementing Malware scanning and Data Sampling for Mass Storages. Implementing a secure Workstation Backup Solution that meets the security standards and compliance requirements.
In 2022 the team will also working on increasing visibility (ownership and classification) of data sprawl across WFM's environment by verifying and rationalizing information. This includes Securing Structured Data by performing risk assessment of the current posture. Complete missing asset and configuration items (CIs) mapping in CMDB. Build Data Loss Prevention capabilities for web traffic for egress traffic from mobile assets. While this is in motion, the team is responsible for enhancing Security Policies and Standards as a continuous process improvement.

A day in the life
Data Loss Prevention, Building Secure Storage Solutions for data at rest, Data security risk assessments, risk analysis, respond to external threats such as ransomeware, structured data protection, Amazon Web Services EC2 Instances, Security Groups, Access controls on the technology part. Enhance Security Policies and Standards on a continuos basis. Build and generate reports and publish metrics to provide a picture of the current security posture pertaining to data protection.
About the team
We are guardians of customer trust. Data about our business, customers, and customer behaviors is one of our most valuable assets, and it must be protected accordingly. We strive to raise the bar on information security practices and procedures to better protect customer and business data from breach to its confidentiality, integrity, and accessibility. We escalate appropriately and prioritize the critical and high security risk for remediation. We provide visibility and transparency on biggest potential risks so that senior leadership is informed about WFM exposure. We may not have all the answers but will own finding the right answer and right guidance. We continuously strive to enhance our Security Posture using in-house technology. Where not possible, we meet immediate security requirements using proven third-party solutions as well.

BASIC QUALIFICATIONS
Knowledge of core application security principles, common security vulnerability classes, their root causes, and mitigations
Bachelors degree in Computer Science, Information Security, related field or equivalent industry experience.
Minimum 5-7 years of data security experience. Hands-on knowledge into implementation, configuration, management, and assessment of security solutions.
Knowledge of PCI DSS, SOX, CCPA, HIPAA.
Must possess strong written & verbal communication skills with the ability to develop security standards, write concise correspondence and policy briefings for senior staff.
Team player with high sense of ownership, urgency, and drive. Knowledge of AWS Fundamentals, IaaS (Infrastructure-as-a-Service) and PaaS (Platform-as-a-Service) for cloud ecosystems.
Scripting Skills (e.g., RegEx, Perl, Python shell scripting) and be able to enhance integration, testing and implementation of Security Technologies.
Experience with of process improvement, building, and strategic development.
Experience with products and services
Experience with cross-organizational collaboration and negotiation

PREFERRED QUALIFICATIONS
Experience and current interest in the sub-disciplines of Infrastructure and Host Security (bare-metal and container deployment models) and interest in growing your skills in native Cloud Security.
Masters degree in Information Systems, related field, or equivalent practical experience.
10 years data security experience. Experience implementation data security solutions in a large organization.
Meets/exceeds Amazons leadership principles requirements for this role.
Meets/exceeds Amazons functional/technical depth and complexity for this role.
AWS platform & services expert with one or more AWS Certifications.
Hold Security Certifications such as CISSP, CISM, CISA, CRISC, SANS GIAC or equivalent experience.
Education: Any Graduate
Industry: Consumer Durables/FMCG, Warehousing

Skills Required