Senior Security Engineer

Responsibilities

• Lead end-to-end security reviews for complex, high-priority services, including design reviews and threat modeling.
• Perform independent threat modeling for complex distributed systems to identify risks and recommend mitigations.
• Conduct targeted manual code reviews of security-critical components to identify vulnerabilities missed by automated tools.
• Design and build security automation and tooling, leveraging generative AI and machine learning to streamline workflows.
• Scope, coordinate, and oversee penetration testing engagements and drive remediation with service teams.
• Serve as a technical subject matter expert, providing architectural guidance and mentorship to junior engineers and service teams.
• Define and track security metrics to measure risk reduction and operational efficiency.

Requirements

• 4+ years of experience troubleshooting systems issues, analyzing logs, or automating complex tasks.
• 5+ years of experience identifying security issues and risks and developing mitigation plans.
• 4+ years of experience in scripting, programming, and security code review.
• Proficiency in at least two of the following: Scala, Java, Python, C/C++, or Go.
• Proven experience as a mentor, tech lead, or leading an engineering team.

Preferred Qualifications

• Experience applying threat modeling or other advanced risk identification techniques.
• Experience with security in service-oriented architectures, microservices, and web services.

Benefits

• Comprehensive health insurance including medical, dental, and vision.
• 401(k) matching and restricted stock units (RSUs).
• Paid time off and parental leave.
• Flexible work hours and arrangements to support work-life harmony.

About the Company

Amazon Security is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, and more.