Senior Security Engineer, AWS Vulnerability Management, AWS Vulnerability Management - Host OS and Third Party Software
Core
Build offensive security solutions for third-party software and software supply chain vulnerability management at Amazon, focusing on penetration testing, exploit development, and threat intelligence to identify attack paths and mitigate supply chain risks.
Role type
Senior IC offensive security engineer (supply chain)
Builds
Detection-to-block automation, security requirements for CI/CD toolchains, and validated designs for software development engineers
Domain
Cloud security, software supply chain, offensive security
Required skills
Penetration testing, exploit development, threat intelligence, scripting/programming (Scala, Java, Python, C/C++, Go), security code review, architecture review, mentoring
Preferred skills
Application security frameworks, identity and access controls, incident response, mobile security, cloud computing security, AI security, threat modeling, security in microservices
Technologies
CI/CD toolchains, package registries, command line tools
Responsibilities
Hunt for attack paths through third-party software packages using penetration testing and threat intelligence; Define and enforce security bars for curated package registries and CI/CD toolchains; Build and test detection-to-block automation for supply chain incidents; Raise security bar across code repositories via architecture and code reviews; Mentor security engineers and shape a culture of fast, pragmatic solutions
Seniority
Senior, hands-on IC with mentorship responsibilities