Security Engineer I, AWS Proactive Security Team

Are you passionate about protecting systems and data at massive scale? As a Security Engineer I at Amazon, you will help safeguard the applications and infrastructure that millions of customers rely on every day. In this role, you will work alongside experienced security engineers to identify and reduce security risks, conduct threat analysis, and contribute to building secure solutions. You will gain hands-on experience across security domains while making a meaningful impact on customer trust and the overall security posture of the services you support.

Key job responsibilities
- Analyze software and services to identify security requirements, model threats, and pinpoint potential vulnerabilities across your team's scope of responsibility.
- Conduct security code reviews to evaluate source code for vulnerabilities, weaknesses in implementation, and deviations from secure coding practices, recommending specific remediation strategies.
- Contribute to runbooks, automation scripts, and security tooling that improve your team's ability to detect and respond to security issues at scale.
- Collaborate with development teams and peers to embed security into the software development lifecycle, from design through testing and deployment.
- Communicate security risks clearly in written and verbal form to your team, partner teams, and direct leadership, driving actionable outcomes.

A day in the life
Your morning might start by reviewing the results of a recent security assessment and triaging findings with your team. After standup, you could spend time performing a code review for a partner team's new service, flagging areas where input handling needs strengthening. In the afternoon, you might update a runbook based on lessons learned from a recent incident, or write a script to automate a repetitive security check. You will regularly connect with development engineers and more senior security engineers to discuss design decisions and learn new approaches.

About the team
Our team is focused on reducing security risk across Amazon's products and services, ensuring that customers can trust the systems they interact with every day. We work closely with engineering teams to promote secure development practices and build preventive and detective controls. We value curiosity and continuous learning, and we are committed to creating an inclusive environment where every team member's perspective strengthens our security mission.

Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic Qualifications

-2+ years of web protocols, common security attacks, and remediation (non-internship) experience
-Bachelor's degree in Engineering, Computer Science, or a related field
-Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
-Experience with web protocols, common security attacks, and remediation (non-internship)
-Experience solving basic problems by writing code or scripts with some assistance

Preferred Qualifications

-Experience with AWS services or other cloud offerings

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, TX, Austin - 136,000.00 - 184,000.00 USD annually
USA, WA, Seattle - 136,000.00 - 184,000.00 USD annually