Security Engineer II, Amazon Vulnerability Management - Container Domain
Core
Assess, triage, and drive remediation of container vulnerabilities across AWS's container ecosystem (ECS, EKS, SageMaker) to secure how Amazon builds and runs containers.
Role type
Senior IC security engineer (container vulnerability management)
Builds
Scalable risk-assessment mechanisms, automation, tooling, and workflows for patch deployment and remediation tracking.
Domain
Cloud infrastructure security, container orchestration
Required skills
scripting and programming, security code review, troubleshooting systems issues, log analysis, automation with command line tools, networking protocols (HTTP, DNS, TCP/IP), vulnerability assessment and remediation
Preferred skills
Python/Java/C++ scripting, security activities across SDLC phases (design review, threat modeling, secure code review, security testing), penetration testing, exploit development
Technologies
Amazon ECS, EKS, SageMaker, container images, base layers, orchestration platforms
Responsibilities
Analyze public and private vulnerability disclosures and exploit code; investigate and triage container findings; partner with builder teams to fix container security issues; engineer risk-assessment mechanisms; design and implement automation for patch deployment and remediation tracking; perform periodic on-call monitoring.
Seniority
Senior, hands-on IC (via careerplan.io/jobs/10568811-security-engineer-ii-amazon-vulnerability-management-container-domain-at-amazon)