Security Engineer, Infrastructure Application… at Amazon · Herndon

Summary: Amazon.com Services LLC is seeking a Security Engineer to join their AWS Security team. The role involves providing hands-on security engineering support to infrastructure builders, conducting security design reviews, and developing security automation tools to enhance security practices.

Responsibilities:
- Conduct security design reviews and threat modeling for infrastructure services, identifying risks and providing clear remediation guidance to partner teams
- Perform manual and automated secure code review across infrastructure codebases
- Provide security architecture and design guidance to builders at the ideation and implementation stages
- Develop and maintain security automation tools that scale review processes across the infrastructure portfolio
- Document findings, track remediation progress, and verify fixes with partner teams
- Deliver security training and outreach to internal infrastructure development teams
- Identify and escalate high-severity security issues through appropriate channels, aligned to launch timelines

Required Qualifications:
- Bachelor's degree in Engineering, Computer Science, or a related field
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience with web protocols, common security attacks, and remediation (non-internship)
- Experience solving basic problems by writing code or scripts with some assistance
- Experience applying threat modeling or other risk identification techniques or equivalent

Preferred Qualifications:
- Experience with AWS services or other cloud offerings
- Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls
- Experience scripting with Python, Perl, Bash or PowerShell
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP

Required Skills: System security vulnerabilities, Penetration testing, Exploit development, Web protocols, Threat modeling, AWS services, Application security frameworks, Security code reviews, Incident response, Security infrastructure, Mobile security, Cloud security, AI security, Identity and access controls, Python, Perl, Bash, PowerShell, Networking protocols, HTTP, DNS, TCP/IP

Benefits: Sign-on payments, Restricted stock units (RSUs), Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, Paid time off, Parental leave