Prototype Security Investigator, Prototype Security Investigations

The Amazon Security (AmSec) team is searching for a Security Industry Specialist for its Prototype Security Investigations team who is able to develop, implement and lead security projects and programs to support Amazon's prototype device teams.

This position will provide security investigation support to all Amazon consumer electronic devices prior to release to the general public and support the overall prototype investigations posture for the Amazon Devices & Services Organization.

The Amazon Devices Organization designs and engineers high-profile consumer electronics, including the best-selling Kindle family of products as well as devices like Fire tablets, Fire TV, Amazon Astro, and Amazon Echo.

This role will have a global reach and focus to ensure consistent prototype security investigations are provided and executed to all prototypes reported as lost or misplaced.

In this position, the Prototype Security Investigator will have regular engagement with all product lines of business to create and foster an engagement model to ensure security has a seat at the table with all Amazon Devices & Services Organization product lines.

To be successful in this position, the Prototype Security Investigator must have the ability to understand the Amazon prototype development process, build strong relationships with key business teams, independently identify process failures, and provide suggested risk mitigation solutions. This role will have a region-wide reach and focus to ensure consistent prototype security investigations are provided and executed to all prototypes reported as lost or misplaced with a given geographical region.

This position will report to the Amazon Security, Prototype Security Investigations Manager.

• Key job responsibilities
• Investigation Leadership & Execution:
• •Serve as the primary security point of contact and escalation for all prototype investigations within assigned region
• •Conduct complex investigations into prototype device losses, unauthorized disclosures, and marketplace diversion cases following industry-standard forensic and evidence handling procedures
• •Partner with Enterprise Protection Program (EPP) and legal teams to ensure investigation methodologies meet evidentiary standards

• Program & Process Development:
• •Design and implement investigation frameworks and protocols that meet legal and regulatory requirements
• •Create and maintain investigation documentation and chain of custody processes that satisfy external audit requirements
• •Optimize cross-functional processes to improve security-focused projects and goals
• •Discover and leverage existing solutions to enhance project and process efficiency

• Risk Management & Mitigation:
• •Conduct security risk and vulnerability assessments from root cause analysis of lost device investigations
• •Design and implement mitigation strategies to reduce device losses and intellectual property risks
• •Handle complex security and compliance programs, managing visible risks and roadblocks
• •Use expertise to implement straightforward solutions with limited guidance

• Metrics & Reporting:
• •Establish metrics and reporting to demonstrate effectiveness of security investigation controls
• •Write reports evaluating and analyzing metrics to support risk-based prioritization of solutions

• Training & Development:
• •Lead the development and delivery of security education materials and programs
• •Mentor junior team members and advise peers on best practices in prototype security
• •Stay current with industry standards and external practices related to prototype security

• Business Partner Management:
• •Work across teams within Amazon Security to influence goals, priorities, and trade-offs
• •Communicate technical and industry knowledge effectively to engineering, program management, and business teams

• A day in the life
• •Case Review and Prioritization for leak and unauthorized disclosure investigations
• •Evidence Collection and Analysis
• •Documentation and Reporting
• •Collaboration and Communication
• •Continuous Learning and Professional Development

• About the team
• The Prototype Security Investigations team (PSI) aims to mitigate unauthorized intellectual property (IP) disclosure, prototype device loss and theft, and non-compliance with the Acceptable Use Policy. We reduce risk to Amazon IP, make informed decisions to decrease intellectual property loss, and support regulatory requirements. We identify process gaps and failures and use risk-based prioritization to address issues that pose the highest risk to Amazon’s intellectual property.

• Diverse Experiences
• Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

• Why Amazon Security?
• At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores

• Inclusive Team Culture
• In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

• Training & Career Growth
• We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

• Work/Life Balance
• We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic qualifications

• - Experience in Incident Management, Threat Management, Corporate Investigations, Law Enforcement, Security Operations, Crisis Management or a related field that involves conducting threat assessments, workplace investigations, and/or incident response
• - Experience in conducting investigative work, including claimant, witness, and target employee interviews, investigative data analysis, and production of investigative documentation
• - Domestic and international travel may be required (25-35% of time).
• - 3+ years of experience using a case management system and data analysis software to investigate system failures, uncover root causes, and driving resolution.

Preferred qualifications

• - Lean Six Sigma Green Belt or Black Belt certification
• - professional certification in information security (SANS GIAC, CISSP, or equivalent)
• - Experience that includes strong analytical skills, attention to detail, and effective communication abilities
• - Naturally curious and tenacious to dive deep into issues to get to the root cause of the system failure(s).
• - Effective written and oral communication with multiple levels of leadership involving both business and technical sides of the business Understanding of reading statistics and how data is used to inform policies and procedures.
• - MCFE, CPP, CPI, CISM, or PMP Certification.

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of