Sr. Security Engineer, Proactive Security

As a Sr. Security Engineer in AWS Security, you will help validate the security of services, applications, and websites. The role combines application security reviews, automation, threat response, and engineering mentorship to improve security outcomes across internal teams.

Role Overview

You will analyze application security, identify and address issues, build security automation, and respond to new threat scenarios. The position also includes delivering security metrics, improving security processes, and contributing to security training, outreach, and guidance materials.

Responsibilities

• Conduct application security reviews, including architecture reviews, threat modeling, code reviews, and security testing
• Perform mobile security reviews
• Undertake projects and research work as needed
• Provide security training and outreach to internal development teams
• Deliver security guidance and documentation
• Build and maintain security workflow automation
• Deliver security metrics and drive process improvements
• Assist with recruiting activities and administrative work

Required Qualifications

• 5+ years of any combination of application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing
• 5+ years of full secure software development life cycle experience, including coding standards, code reviews, source control management, build processes, testing, and operations
• 4+ years of (non-internship) scripting, programming, and security code review experience in common programming languages
• Knowledge of at least two programming languages: Scala, Java, Python, C/C++, or Go
• Bachelor's degree in Computer Science or a related field
• Experience identifying security issues and risks, and developing mitigation plans
• Experience (non-internship) identifying industry-based security vulnerabilities, attack patterns, and remediation techniques
• Experience mentoring, serving as a tech lead, or leading an engineering team
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP

Technologies

• Scala
• Java
• Python
• C/C++
• Go
• HTTP(S)
• DNS
• TCP/IP

Preferred Qualifications

• Experience applying threat modeling or other risk identification techniques or equivalent experience
• Experience with security in service-oriented architectures, microservices, and web services
• Experience with device technologies under development, including flashing firmware, basic device debugging, reading or pulling device logs, or technical support experience
• Experience with combinations of application security frameworks, security code reviews, incident response, secure infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls, threat modeling, cryptography, threat intelligence, or secure software development
• Strong analytical skills, attention to detail, and effective communication abilities, including experience in web security and automation with version control tools

Benefits

• Sign-on payments and restricted stock units (RSUs)
• Health insurance including medical, dental, vision, prescription, Basic Life & AD&D insurance, and options for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

About the Team

• Diverse Experiences
• Inclusive Team Culture
• Training & Career Growth
• Work/Life Balance
• Why Amazon Security?

Compensation and Location

Location: Arlington, VA (onsite)

Salary: USD 178,400 - 226,700 per year

Minimum Experience: 4 years

Education: Bachelor's degree in Computer Science or a related field