Advertising at Amazon is a fast-growing, multi-billion dollar business that spans across desktop, mobile and connected devices; encompasses ads on Amazon and a vast network of hundreds of thousands of third party publishers; and extends worldwide. Traffic Quality, within Amazon Advertising, builds technology to detect invalid traffic (IVT) and ensure that Advertiser spend worldwide is directed towards human audiences and protected from ad fraud.

As the Security engineering team within Traffic Quality, we research programmatic advertising risk landscapes to build an understanding of existing and emergent threats. We build specialized techniques to detect and mitigate these threats, contributing to a robust Traffic Quality platform that is a bedrock of advertiser trust and saves hundreds of millions of dollars in ad spend that would otherwise be lost to IVT. The Security Engineering team is responsible for: (a) Targeted threat hunting, including on the dark web, to consistently stay updated on modus operandi and risks associated with advertising fraud, (b) Building sophisticated mitigation techniques through reverse engineering known software, identifying network layer signatures, and conceiving client-side scripting methods, and, (c) Collaborating with security teams across Amazon for sharing intelligence and devising durable detection techniques.

As a Security Engineer in the team, you are passionate about unraveling ad fraud tactics utilizing a diversity of highly specialized skills in reverse-engineering, deep packet inspection of network traffic, understanding of network security, operating systems and browser architectures. You accomplish your tasks by applying expert level knowledge to tools to understand not only what a particular piece of malware for perpetrating ad fraud can do but also how it does it. You work with internal security teams to identify and mitigate botnets, as well as leverage the ethical hacking community to obtain standard modus operandi, source code and tactics used by malware and botnets. The role requires influencing leaders across the company to improve our security bar and protect advertiser trust. A Security Engineer also works with other product and security teams to proactively identify problems and suggest approaches to solve them.

Given the high level of ambiguity in the advertising fraud space, and the need to prepare for unknown unknowns, your creativity, judgement and bias for action will all be key ingredients towards delivering the right results for advertising customers. - Knowledge of networking protocols such as HTTP, DNS and TCP/IP
- Experience programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language
- Bachelor's degree- Experience with AWS products and services
- Experience with any combination of the following: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Experience with programming languages such as Python, Java, C++

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status. For individuals with disabilities who would like to request an accommodation, please visit https://www.amazon.jobs/content/en/how-we-hire/accommodations.