Security Engineer, Field Innovation, Security Search and Observability (SSO)
Amazon Web Services (AWS) · Arlington, VA · 3 wk ago
Quality AssuranceFull-time
We need to output HTML fragment with sections: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content.
We need to parse the description.
First, remove boilerplate: EEO, Los Angeles County stuff, accommodation links, etc. Also remove duplicated lines, application instructions, etc.
We need to preserve substantive info.
Let's extract sections:
- About the role: The description starts with "Description The Field Innovation team is a Forward Deployed Engineering (FDE) group inside the AWS Security, Search, Observability, and Governance service team. We work directly with customers to build next-generation security capabilities that help the world's largest enterprises get faster return on value from security, search, observability, and governance services. We are hiring a Senior Security Engineer to work at the intersection of customer impact and AI. Our team builds and operates the detection, correlation, and vulnerability-management capabilities behind security services such as AWS Security Hub, AWS CloudTrail, and AWS GuardDuty, as well as our newest AI-powered offering, AWS Continuum, which manages the full lifecycle of code vulnerabilities at machine speed. You'll work with customers to understand how they operate, then partner with service teams to design and ship commercial-grade security products powered by modern AI, including large language models, AI-assisted development tools, security agents, and emerging frameworks. Your code ships to real customers, and your architectural decisions will shape how Fortune 500 companies operate."
That's about the role.
- The Opportunity: "Your impact here will be immediate and visible. You'll ship features that directly change how customers run their businesses, and you'll see the impact of your work in weeks, not years. The team is small enough that your decisions carry real weight and large enough that you'll always have someone to learn from. This is a dual-facing role. On the field side, you'll work directly with customers to implement the latest features of our security services, leading threat-modeling sessions, performing vulnerability assessments with security agents, and guiding remediation. On the partner side, you'll work with leading third-party security providers to identify their highest-signal findings and turn them into correlated, high-fidelity detections. Across both, you'll design and implement detection content, reduce false positives at scale, and expand coverage across cloud resources, runtime, and AI/ML workloads. Everything you learn in the field feeds back into the product. AI is not a side experiment on this team. It's a core part of the stack. You'll build with large language models, AI-assisted development tools, security agents, agent frameworks, and retrieval-augmented generation as everyday engineering primitives."
This could be part of responsibilities or about role. But we can treat as part of responsibilities.
- Key job responsibilities: bullet list? Actually it's a paragraph: "Run early-access and gated previews of our newest AI-powered capabilities with customers, including threat modeling, vulnerability assessment using security agents, and remediation guidance. Work backwards from customers to shape detection coverage and influence service roadmaps, feeding field and partner insights back to science and engineering teams. Drive detection engineering best practices, including security-value evaluation, false-positive reduction, and coverage measurement. Stay current with the evolving cloud security and threat landscape, including emerging threats targeting agentic AI and ML applications. Collaborate across science, engineering, partner, and field teams, operating with flexible hours to support global customers and distributed stakeholders."
That's responsibilities.
- Basic Qualifications: list: "3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 3+ years of IT Security experience Knowledge of industry-based security vulnerabilities and remediation techniques Experience in scripting, programming, and security code reviewing in a common programming language (non-internship) Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)"
There's duplication. We need to preserve all substantive info but avoid duplication? The instruction: "Preserve ALL substantive information; do NOT invent or summarize away detail." But also "Remove duplicated lines". So we need to deduplicate.
Let's extract unique qualifications:
- 3+ years of scripting, programming, and security code review in a common programming language (non-internship)
- 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
- Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 3+ years of IT Security experience
- Knowledge of industry-based security vulnerabilities and remediation techniques
That's it.
- Preferred Qualifications: "3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience Experience with AWS products and services Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++ Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing Experience working in a customer-facing role"
We need to deduplicate: "Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++" is similar to basic qualification but okay.
Let's list unique preferred qualifications:
- 3+ years of any combination of: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Experience with AWS products and services
- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
- Experience performing security activities across one or more phases of the SDLC (security design review, threat modeling, secure code review, security testing)
- Experience working in a customer-facing role
- Benefits: The posting mentions: "Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits."
Thus we have benefits content.
- Pay: "The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location." Then they list ranges for various locations: USA, CA, Santa Clara - 166,600.00 - 212,800.00 USD annually; USA, TX, Austin - 159,300.00 - 202,400.00 USD annually; USA, VA, Arlington - 159,300.00 - 202,400.00 USD annually; USA, WA, Bellevue - 159,300.00 - 202,400.00 USD annually; USA, WA, Seattle - 159,300.00 - 202,400.00 USD annually.
Thus we have pay info.
- Schedule: Not explicitly mentioned. There's "operating with flexible hours to support global customers and distributed stakeholders." That's about schedule flexibility. Could be considered schedule content. The instruction: include Schedule section only if posting actually states them. It does mention flexible hours. So we can include Schedule with that detail.
Now we need to output HTML with headings for each section. Use
for each section. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to decide which content is list vs prose.
Sections:
- About the role: prose (maybe multiple paragraphs). We'll put in
.
- Responsibilities: list of duties (the bullet points). We'll make
- each.
- Requirements: could be Basic Qualifications (maybe call Requirements). We'll list as
- .
- Qualifications: Preferred Qualifications list.
- Skills: maybe combine some? But we have no explicit skills section; we could skip if no specific content. The instruction: prefer a few substantive sections over many thin ones. We could merge Basic and Preferred into Requirements and Qualifications. Skills maybe not needed.
- Benefits: list.
- Pay: list of salary ranges (maybe
- each location).
- Schedule: prose about flexible hours.
We must not repeat job title as heading. Not include Job ID.
We must not include boilerplate like EEO, accommodation, Los Angeles County details, etc.
We must not include duplicated lines.
Now craft HTML.
Let's write:
About the role
The Field Innovation team is a Forward Deployed Engineering (FDE) group inside the AWS Security, Search, Observability, and Governance service team. We work directly with customers to build next-generation security capabilities that help the world's largest enterprises get faster return on value from security, search, observability, and governance services. We are hiring a Senior Security Engineer to work at the intersection of customer impact and AI. Our team builds and operates the detection, correlation, and vulnerability-management capabilities behind security services such as AWS Security Hub, AWS CloudTrail, and AWS GuardDuty, as well as our newest AI-powered offering, AWS Continuum, which manages the full lifecycle of code vulnerabilities at machine speed. You'll work with customers to understand how they operate, then partner with service teams to design and ship commercial-grade security products powered by modern AI, including large language models, AI-assisted development tools, security agents, and emerging frameworks. Your code ships to real customers, and your architectural decisions will shape how Fortune 500 companies operate.
Responsibilities
- Run early-access and gated previews of our newest AI-powered capabilities with customers, including threat modeling, vulnerability assessment using security agents, and remediation guidance.
- Work backwards from customers to shape detection coverage and influence service roadmaps, feeding field and partner insights back to science and engineering teams.
- Drive detection engineering best practices, including security-value evaluation, false-positive reduction, and coverage measurement.
- Stay current with the evolving cloud security and threat landscape, including emerging threats targeting agentic AI and ML applications.
- Collaborate across science, engineering, partner, and field teams, operating with flexible hours to support global customers and distributed stakeholders.
Requirements
- 3+ years of scripting, programming, and security code review in a common programming language (non-internship)
- 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
- Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 3+ years of IT Security experience
- Knowledge of industry-based security vulnerabilities and remediation techniques
Qualifications
- 3+ years of any combination of: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Experience with AWS products and services
- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
- Experience working in a customer-facing role
for prose. We need to decide which content is list vs prose. Sections: - About the role: prose (maybe multiple paragraphs). We'll put in
. - Responsibilities: list of duties (the bullet points). We'll make
- each.
- Requirements: could be Basic Qualifications (maybe call Requirements). We'll list as
- .
- Qualifications: Preferred Qualifications list.
- Skills: maybe combine some? But we have no explicit skills section; we could skip if no specific content. The instruction: prefer a few substantive sections over many thin ones. We could merge Basic and Preferred into Requirements and Qualifications. Skills maybe not needed.
- Benefits: list.
- Pay: list of salary ranges (maybe
- each location).
- Schedule: prose about flexible hours.
We must not repeat job title as heading. Not include Job ID.
We must not include boilerplate like EEO, accommodation, Los Angeles County details, etc.
We must not include duplicated lines.
Now craft HTML.
Let's write:
About the role
The Field Innovation team is a Forward Deployed Engineering (FDE) group inside the AWS Security, Search, Observability, and Governance service team. We work directly with customers to build next-generation security capabilities that help the world's largest enterprises get faster return on value from security, search, observability, and governance services. We are hiring a Senior Security Engineer to work at the intersection of customer impact and AI. Our team builds and operates the detection, correlation, and vulnerability-management capabilities behind security services such as AWS Security Hub, AWS CloudTrail, and AWS GuardDuty, as well as our newest AI-powered offering, AWS Continuum, which manages the full lifecycle of code vulnerabilities at machine speed. You'll work with customers to understand how they operate, then partner with service teams to design and ship commercial-grade security products powered by modern AI, including large language models, AI-assisted development tools, security agents, and emerging frameworks. Your code ships to real customers, and your architectural decisions will shape how Fortune 500 companies operate.
Responsibilities
- Run early-access and gated previews of our newest AI-powered capabilities with customers, including threat modeling, vulnerability assessment using security agents, and remediation guidance.
- Work backwards from customers to shape detection coverage and influence service roadmaps, feeding field and partner insights back to science and engineering teams.
- Drive detection engineering best practices, including security-value evaluation, false-positive reduction, and coverage measurement.
- Stay current with the evolving cloud security and threat landscape, including emerging threats targeting agentic AI and ML applications.
- Collaborate across science, engineering, partner, and field teams, operating with flexible hours to support global customers and distributed stakeholders.
Requirements
- 3+ years of scripting, programming, and security code review in a common programming language (non-internship)
- 3+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)
- Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or 3+ years of IT Security experience
- Knowledge of industry-based security vulnerabilities and remediation techniques
Qualifications
- 3+ years of any combination of: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security
- Experience with AWS products and services
- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
- Experience working in a customer-facing role
- each location).
- Schedule: prose about flexible hours.
We must not repeat job title as heading. Not include Job ID.
We must not include boilerplate like EEO, accommodation, Los Angeles County details, etc.
We must not include duplicated lines.
Now craft HTML.
Let's write:
- .
- Qualifications: Preferred Qualifications list.
- Skills: maybe combine some? But we have no explicit skills section; we could skip if no specific content. The instruction: prefer a few substantive sections over many thin ones. We could merge Basic and Preferred into Requirements and Qualifications. Skills maybe not needed.
- Benefits: list.
- Pay: list of salary ranges (maybe