Security Engineer I, AWS Proactive Security Team

About the Role

Are you passionate about protecting systems and data at massive scale? As a Security Engineer I at Amazon, you will help safeguard the applications and infrastructure that millions of customers rely on every day. In this role, you will work alongside experienced security engineers to identify and reduce security risks, conduct threat analysis, and contribute to building secure solutions. You will gain hands-on experience across security domains while making a meaningful impact on customer trust and the overall security posture of the services you support.

Responsibilities

• Analyze software and services to identify security requirements, model threats, and pinpoint potential vulnerabilities across your team's scope of responsibility.
• Conduct security code reviews to evaluate source code for vulnerabilities, weaknesses in implementation, and deviations from secure coding practices, recommending specific remediation strategies.
• Contribute to runbooks, automation scripts, and security tooling that improve your team's ability to detect and respond to security issues at scale.
• Collaborate with development teams and peers to embed security into the software development lifecycle, from design through testing and deployment.
• Communicate security risks clearly in written and verbal form to your team, partner teams, and direct leadership, driving actionable outcomes.

A Day in the Life

Your morning might start by reviewing the results of a recent security assessment and triaging findings with your team. After standup, you could spend time performing a code review for a partner team's new service, flagging areas where input handling needs strengthening. In the afternoon, you might update a runbook based on lessons learned from a recent incident, or write a script to automate a repetitive security check. You will regularly connect with development engineers and more senior security engineers to discuss design decisions and learn new approaches.

About the Team

Our team is focused on reducing security risk across Amazon's products and services, ensuring that customers can trust the systems they interact with every day. We work closely with engineering teams to promote secure development practices and build preventive and detective controls. We value curiosity and continuous learning, and we are committed to creating an inclusive environment where every team member's perspective strengthens our security mission.

Qualifications

• 2+ years of experience with web protocols, common security attacks, and remediation (non-internship)
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent

Preferred Qualifications

• Experience with AWS services or other cloud offerings

Pay

The base salary range for this position is $136,000.00 - $184,000.00 USD annually. Final compensation will be determined based on factors including experience, qualifications, and location. Your Amazon package will include sign-on payments and restricted stock units (RSUs).

Benefits

Amazon offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave.

Company - Amazon.com Services LLC