Senior Security Engineer

A pioneer in K-12 education since 2000, Amplify is leading the way in next-generation curriculum and assessment. Our core and supplemental programs in ELA, math, and science engage all students in rigorous learning and inspire them to think deeply, creatively, and for themselves. Our formative assessment products help teachers identify the targeted instruction students need to build a strong foundation in early reading and math. All of our programs provide educators with powerful tools that help them understand and respond to the needs of every student. Today, Amplify serves more than 10 million students in all 50 states. For more information, visit amplify.com.
Amplify is a leader in creating immersive, rigorous digital learning experiences that look great, play great, and help students expect great things of themselves. Amplify has been described as the best tech company in education, and the best education company in tech.
As a Senior Security Engineer at Amplify, you will join a talented team tackling the toughest problems in education with the best ideas in technology - including user experience, APIs and services, data analysis, and deployment pipelines. You'll play an active role in imagining and improving product design and the classroom experience.
We're looking for intellectual ability, flexibility, ability to learn, and commitment to working together in tight-knit teams.
What You'll Do
Our DevSecOps teams build the tools that empower every engineer to ship code to classrooms quickly and reliably. You'll be a Senior Security Engineer. In that role, you'll be responsible for creating and implementing best-practices for protecting Amplify's data and system assets.
Amplify does not operate a NOC or SOC with "operations engineers" twiddling configs and monitoring alerts. Our SecOps team take a proactive role in building best-practices and sharing that culture, including:

• Impress the toughest customers around - our fellow engineers that build customer facing applications.
  
  • helping teams across the company create fun, compelling apps by designing tools, workflows, and culture to ship code from laptops to classrooms frequently

• Create best-practices to:
  
  • Help teams meet the ultimate reliability and uptime challenges for digital tools by integrating security into
    
    • continuous integration
    • configuration and deployment automation

• • Build data pipelines that respect privacy and ensure security while offering useful insights

• Learn every day by:
  
  • leading collaboration, pull requesting, and mentoring on a cross-functional team
  • participating in cross-team share-outs, brownbags, and workshop series

• Contribute knowledge and ideas to the Information Security Committee for the development of policies, standards, and best-practices
• Improve and participate in our security incident processes

Example Projects You Might Work On

• Streamlining the process to triage the vulnerabilities that are presented from our various reporting systems, including HackerOne, AWS Guard Duty, Datadog and Mend.
• Evolving our hacker engagement program
• Helping to develop and participate in our Red Team to proactively detect and protect from application vulnerabilities
• Work closely with our Software Engineering teams to enhance our awareness, skills, tooling, and processes to identify and remediate vulnerabilities early in the development cycle

Basic Qualifications of the Senior Security Engineer

• BS in Cybersecurity, Computer Science or equivalent experience
• 6+ years of professional software security experience
• Demonstrated track record of cybersecurity fundamentals
• Experience with access and identity management (AWS IAM, GCP IAM, Azure AD, etc)
• Strong communication skills
• Experience with compliance frameworks
  
  • NIST, FERPA, COPA

Extra Credit For

• DevOps experience with at least one cloud service provider
• Experience with tools we use every day:
  
  • Build: Linux, Jenkins, Docker, Python, AWS CodeBuild/CodePipeline
  • Storage: PostgreSQL, S3, DynamoDB
  • Deploy: AWS (ECS, EC2, Lambda, etc.), Terraform
  • Monitoring: Datadog
  • Security: BurpSuit, HackerOne, Mend, Datadog
• Experience with tools we don't use, but should, and the wisdom to know when to recommend them
• Familiarity with incident management best practices.
• Proven passion and talent for teaching fellow engineers and non-engineers
• Proven passion for building and learning: open source contributions, pet projects, self-education, Stack Overflow
• Experience in education or ed-tech

What we offer:
Salary is only one component of the Amplify Total Rewards package, which includes a lucrative 401(k) plan, incentive stock options, competitive health insurance and mental health options, basic life insurance, paid time off, parental leave, and access to best-in-class development programs. The gross salary range for this role is $150,000 - $180,000. This role is eligible to receive an annual discretionary bonus that rewards individual and company performance.
We celebrate diversity and are committed to creating an inclusive environment for all employees. To that end, we seek to recruit, develop and retain the most talented people from a diverse candidate pool.
Amplify is an Equal Opportunity Employer of Minorities, Females, Protected Veterans and Individuals with Disabilities.
This position may be funded, in whole or in part, through American Recovery & Reinvestment Act funds.
Amplify Education, Inc. is an E-Verify participant.