Build and scale vulnerability management for third-party software and open source components used across AWS applications and services.

Review third-party software and open source vulnerabilities, taking an opinionated approach to prioritize the highest risk to customers
Design end-to-end mechanisms for tracking, monitoring, and remediation so service teams can update vulnerable packages without adding builder effort
Lead large-scale remediation efforts and respond quickly to new threat scenarios
Create security automation to scale impact across the fleet, including use of GenAI tooling
Produce security metrics and implement process improvements

3+ years programming with Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object oriented language
Bachelor’s degree in computer science or equivalent
Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
Experience using AI tools to support or enhance security engineering work
Knowledge of industry security vulnerabilities and remediation techniques
2+ years in any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security
Experience with AWS products and services
Experience with programming languages such as Python, Java, and C++
Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and developing exploits (or equivalent)
Ability to own projects, communicate timelines, and execute independently

Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
401(k) matching
Paid time off
Parental leave

Security Engineer II, AWS Vulnerability Management, Third Party Software

Job Description