Security Engineer, AWS Proactive Security

- 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- Bachelor's degree in computer science or equivalent
- Experience with AWS products and services

Amazon is committed to a diverse and inclusive workplace. Amazon is an equal opportunity employer and does not discriminate on the basis of race, national origin, gender, gender identity, sexual orientation, protected veteran status, disability, age, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

Our compensation reflects the cost of labor across several US geographic markets. The base pay for this position ranges from $136,000/year in our lowest geographic market up to $212,800/year in our highest geographic market. Pay is based on a number of factors including market location and may vary depending on job-related knowledge, skills, and experience. Amazon is a total compensation company. Dependent on the position offered, equity, sign-on payments, and other forms of compensation may be provided as part of a total compensation package, in addition to a full range of medical, financial, and/or other benefits. For more information, please visit https://www.aboutamazon.com/workplace/employee-benefits. This position will remain posted until filled. Applicants should apply via our internal or external career site.
The Amazon Web Services (AWS) Proactive Security team is looking for a Security Engineer to help ensure our services, applications, and websites are designed and implemented to the highest security standards. Each day, hundreds of thousands of developers make billions of transactions worldwide on our cloud. They harness the power of AWS to enable innovative applications, websites, and businesses. The AWS Proactive Security team owns security for all of these services offered by AWS, including EC2, S3, Lambda, and more than 150 others. Our Application Security team works with builders across AWS to ensure that AWS products are secure. We dive deep into security technologies such as new authentication systems, hardware security components, cryptography, system hardening, and massive-scale audit analysis.

You will join a team developing tools that use the latest techniques to automatically find security problems in AWS software. You will take the lead in using this technology to drive security improvements in AWS systems.

In this team, we help AWS developers build security into their systems, and we help AWS Security personnel verify that systems are secure. Our tools target all types of AWS systems in a range of domains including web services, IoT, robotics, hypervisors, and cryptography. We must handle the wide range of languages and technologies in use in AWS. Our systems must be scalable to support a large and growing developer population that is innovating quickly.


Key job responsibilities
- Identify pressing security problems that are amenable to automatic detection. Work with your team to implement new detection techniques and tools.

- Ensure that detected security issues are treated with a level of urgency that reflects their true risk.

- Investigate security issues and identify opportunities for detecting or preventing similar issues with automation.

- Provide guidance to the AWS community on secure coding and development practices.

A Security Engineer in AWS is expected to rapidly assess risk in the face of ambiguity and scale. You will be one of the security experts on the team. As a security expert, you will work with experts in program analysis and software development to build an end-to-end system to find critical security issues. Your team will look to you to understand what security problems to solve, and how to effectively drive fixes.

A day in the life
As a security engineer with AWS Proactive Security, you will identify and build detections for security problems at AWS. You will work with your team, other security engineers and AWS Service teams to identify risks and opportunities for detecting and preventing recurrence of security issues with automation. You will own assessment and calibration of these risks and own the development and release of these detections. You will coordinate with Incident Response teams to drive mitigation of these risks. You will own balancing and advocating for the development of detections that will have the most impact to raising the bar at AWS Security.

About the team
About Amazon Security

Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.