Security Engineer, AWS Proactive Security

At Amazon Web Services, this pre-launch Security Engineer role supports a testing team that evaluates AWS services and features, with a focus on maintaining a strong security posture before releases. You will review builder-submitted security fixes, verify their effectiveness, and help strengthen proactive security through automation and hands-on analysis.

Based in Florida (onsite), you will work with testers and developers to reproduce findings across different customer environments, and communicate clear, actionable guidance that improves application security over time.

What you’ll do

• Automate the verification and remediation of security issues
• Manually audit source code of web services and in-house software authored by Amazon
• Write proof of concept code to demonstrate the severity of potential security issues
• Communicate findings clearly to developers and support testing of proposed fixes
• Partner with AWS developers to drive application security improvements based on security review engagements
• Provide actionable long-term risk mitigation guidance

How the work is carried out

• Support pre-launch verifications by reviewing and diving deep into builder-proposed fixes in development environments
• Perform static code analysis and dynamic reproduction to determine whether proposed fixes are sufficient for release
• Develop and support automated tooling (for example, fuzzers, scanners, and analyzers) to verify security fixes related to penetration testing
• Use manual analysis to find security issues that static analysis tools cannot and feed those results into enterprise-wide automation

Basic qualifications

• 2+ years of web protocols, common security attacks, and remediation experience (non-internship)
• Bachelor’s degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits (or equivalent)
• Experience scripting with Python, Perl, Bash, or PowerShell

Technologies

• Python, Perl, Bash, PowerShell
• BurpSuite, Metasploit, IDA Pro
• AWS

Preferred qualifications

• Experience with AWS services or other cloud offerings
• Experience coding/scripting in one or more languages (for example, Python, C, C++, Java, Ruby, or PowerShell)
• Experience using standard security assessment and penetration testing tools such as BurpSuite, Metasploit, and IDA Pro

Compensation

USD 136,000 - 184,000 per year.

Benefits

• Health insurance (medical, dental, vision, prescription), Basic Life & AD&D insurance, and an option for Supplemental life plans
• EAP, Mental Health Support, Medical Advice Line
• Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

About the team

• Diverse experiences are valued, and candidates are encouraged to apply even if they do not meet every listed qualification.
• Amazon Security emphasizes inclusive learning, curiosity, and ongoing DEI events and learning experiences.
• Training & career growth is supported through continuous performance improvement.
• Work/life harmony is supported with flexible work hours and arrangements.