Security Engineer, CS Security
Core
Design, build, and maintain automated security guardrails and paved paths to embed secure-by-default practices into applications early in the software development lifecycle.
Role type
Senior IC application security engineer (cloud & automation)
Builds
Automated, continuous security assessment capabilities and self-service security tools for Amazon's technology landscape
Domain
Cloud security, application security, and secure software development lifecycle
Deliverable
production ML models | product features | infrastructure
Required skills
Python, Ruby, Go, Swift, Java, .Net, C++, HTTP, DNS, TCP/IP, application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, penetration testing
Preferred skills
threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, network security, AWS products and services, Large Language Models (LLMs) for security automation
Technologies
Python, Ruby, Go, Swift, Java, .Net, C++, HTTP, DNS, TCP/IP, AWS
Responsibilities
Design and implement preventive and detective security controls; Engage early with development teams to provide guidance on secure architecture and coding practices; Contribute code for security fixes and paved path solutions directly alongside developers; Build scalable, self-service security tools to identify and remediate security risks; Participate in periodic on-call rotations to support security incidents
Seniority
Senior, hands-on IC