Security Engineer II, AWS Vulnerability Management, Third Party Software
Core
Build products and services to identify, track, and mitigate security risks in third-party software and open source libraries across AWS.
Role type
Senior IC security engineer (vulnerability management)
Builds
End-to-end tracking, monitoring, and remediation mechanisms for third-party software updates
Domain
Cloud security, third-party software supply chain
Deliverable
production ML models
Required skills
Python, Ruby, Go, Swift, Java, .Net, C++, networking protocols (HTTP, DNS, TCP/IP), AI tools for security, vulnerability analysis, remediation techniques
Preferred skills
Threat modeling, secure coding, identity management, cryptography, system administration, network security, penetration testing, exploit development, project ownership
Technologies
AWS products and services, GenAI tooling
Responsibilities
Analyze third-party software and open source vulnerabilities; Build automation to enable zero-cost updates for service teams; Drive large-scale remediation and respond to threat scenarios; Build security automation using GenAI; Deliver security metrics and process improvements
Seniority
Senior, hands-on IC