Senior Security Engineer, Amazon

• This role requires deep technical expertise in application security, threat modeling, and secure system design, combined with the ability to influence engineering teams and deliver high-impact security outcomes with minimal guidance
• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience working in identifying security issues and risks, and developing mitigation plans
• Experience as a mentor, tech lead or leading an engineering team
• Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply

Desirable

• The Senior Security Engineer is a senior individual contributor responsible for independently driving security initiatives across multiple services and teams
• Security Reviews & Assessments: Lead end-to-end security reviews for complex, high-priority services including design reviews, threat modeling, and penetration testing scoping and readout
• Technical Leadership: Serve as a subject matter expert for assigned affinity teams, providing architectural guidance and security consultation to service teams throughout the development lifecycle
• Threat Modeling: Independently perform and guide threat modeling exercises for complex distributed systems, identifying risks and recommending mitigations
• Manual Code Review: Conduct targeted manual code reviews of security-critical components, identifying vulnerabilities and insecure patterns that automated tools miss
• Penetration Testing: Scope, coordinate, and oversee penetration testing engagements; analyze results and drive remediation with service teams
• Findings Management: Identify, document, and track security findings to resolution; escalate critical issues to leadership when appropriate
• Mentorship & Influence: Mentor junior engineers, contribute to team processes and tooling improvements, and raise the security bar across the organization
• Design & Build Security Tooling: Design and build security automation, tooling, and processes that improve operational efficiency and scale the team's impact
• AI-Powered Security Automation: Leverage generative AI and machine learning to build intelligent security automations that streamline review workflows, enhance vulnerability detection, and reduce manual toil
• Builder Engagement: Partner with service teams to improve security posture proactively, including developing self-service guidance, documentation, and readiness frameworks
• Metrics & Reporting: Define and track security metrics that measure risk reduction, operational efficiency, and builder experience improvements
• At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services
• We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores