Security Engineer III, Customer Service Security

Amazon’s Customer Service Security team is building pragmatic security capabilities that reduce risk while improving customer and associate experiences at global scale. This role focuses on identifying customer service security risks, designing scalable controls, and shaping security architecture decisions so teams can launch securely.

You will lead security reviews and risk analysis, create reusable security frameworks, and mentor other security engineers. The work supports customer interactions across billions of contacts annually in more than 40 countries, with ongoing investment in new engineering capabilities to make every customer contact more secure.

Responsibilities

• Lead security reviews, threat modeling, and risk assessments for customer service systems, using pragmatic approaches to mitigate risk while enabling secure launches.
• Design and build security controls and engineering solutions to protect customer data and enable secure customer contacts at scale.
• Partner with business stakeholders, product owners, and engineering teams to understand emerging risks and define security strategies where none yet exist.
• Create security frameworks, runbooks, and rubrics for new problem domains to help other engineers apply consistent and repeatable security practices.
• Communicate security risk and design decisions clearly in writing to technical and non-technical audiences, and mentor other security engineers on best practices.

Requirements

• 4+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• 5+ years identifying security issues and risks, including experience developing mitigation plans.
• 4+ years non-internship experience scripting, programming, and security code review in common programming languages.
• Knowledge of at least two programming languages: Scala, Java, Python, C/C++, or Go.
• Experience identifying security issues and risks and developing mitigation plans.
• Experience in industry-based security vulnerabilities identification, attack patterns, and remediation techniques.
• Experience as a mentor, tech lead, or leading an engineering team.

Preferred Qualifications

• Experience applying threat modeling or other risk identification techniques or equivalent.
• Experience with security in service-oriented architectures, microservices, and web services.
• Experience conducting insider threat investigations.
• Experience securing telephony systems against risk.

Technologies

Scala, Java, Python, C/C++, Go

A Day in the Life

• Operate independently and engage directly with business and engineering teams to uncover security risks without predefined solutions.
• Conduct a threat model for a new customer contact workflow.
• Write a security framework that other teams will adopt.
• Review architecture proposals to ensure they meet the security bar.
• Balance proactive roadmap-driven work with responding to emerging security concerns.

Benefits

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D, option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments and restricted stock units (RSUs)

Location: Seattle, WA (onsite)
Salary: USD 178,400 - 226,700 per year
Experience level: 4+ years (non-internship)

As part of the CS Security team, you will help engineer solutions that keep customer data secure while supporting fast, high-quality customer and associate experiences at massive scale.