Security Engineer, Infrastructure Application Security

The Security Engineer for infrastructure application security supports Amazon's engineering teams by performing hands-on security work on infrastructure projects, conducting threat modeling and design reviews, and building scalable security automation across AWS data center and infrastructure services.

Location

Herndon, Virginia (onsite)

Salary

USD 136,000 - 184,000 per year

Education

Bachelor's degree in Engineering, Computer Science, or a related field

Overview

This role provides direct security engineering assistance to infrastructure builders at Amazon. It involves reviewing architectures for security risks, guiding teams through remediation, and advancing automation that scales security reviews across the infrastructure portfolio.

Responsibilities

• Perform security design reviews and threat modeling for infrastructure services, identifying risks and delivering clear remediation guidance to partner teams
• Conduct manual and automated secure code reviews across infrastructure codebases
• Offer security architecture and design guidance to builders during ideation and implementation phases
• Develop and maintain security automation tools to scale review processes across the infrastructure portfolio
• Document findings, track remediation progress, and verify fixes with partner teams
• Deliver security training and outreach to internal infrastructure development teams
• Identify and escalate high-severity security issues through appropriate channels, aligned to launch timelines

Requirements

• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance
• Experience applying threat modeling or other risk identification techniques or equivalent

Technologies

• Python
• Perl
• Bash
• PowerShell
• AWS

Benefits

• Health insurance (medical, dental, vision, prescription)
• 401(k) matching
• Paid time off
• Parental leave
• Basic Life & AD&D insurance with option for Supplemental life plans
• Employee Assistance Program (EAP)
• Mental Health Support
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• Sign-on payments
• Restricted Stock Units (RSUs)