Security Engineer, CS Security

About the role

The Customer Service Application Security team is looking for a talented and results-driven Security Engineer to help shape how Amazon protects customer data through secure-by-design principles. This role involves designing, building, and maintaining automated security guardrails and paved paths that enable secure-by-default practices across Amazon's technology landscape.

Responsibilities

• Evaluate system designs for security gaps and provide guidance on secure architecture and coding practices
• Build automated, continuous security assessment capabilities that replace manual security reviews and scale across the business unit
• Contribute code for security fixes and paved path solutions directly alongside developers
• Partner with developers to build scalable, self-service security tools that enable teams to identify and remediate security risks without bottlenecking on security teams
• Design and implement preventive and detective security controls that provide continuous assurance rather than point-in-time assessments
• Collaborate with security stakeholders to define and drive the long-term security strategy and participate in periodic on-call rotations to support security incidents

Qualifications

• Bachelor's degree in computer science or equivalent
• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object-oriented language experience
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP
• 3+ years of any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing experience

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Experience with AWS products and services
• Experience implementing security solutions at the business division level or equivalent
• Experience effectively communicating complex concepts through written and verbal communication
• Experience leveraging Large Language Models (LLMs) to automate and scale security, with a strong understanding of associated security risks and mitigation strategies