Security Engineer II, Customer Logistics Security
Amazon · Austin, TX · 2 days ago
EngineeringFull-time
Achievements
Own end-to-end security outcomes for your area of responsibility, identify patterns across services, and build scalable mechanisms that reduce risk broadly - not just for individual findings.
Responsibilities
- Design, build, and deploy AI/ML-powered solutions to scale vulnerability management operations - including intelligent triage, automated severity contextualization, predictive asset classification, and natural language-driven remediation guidance generation.
- Perform vulnerability assessments with business context, evaluating blast radius and potential impact across accounts, services, and infrastructure.
- Engineer high-quality, scalable vulnerability detection mechanisms - including automated asset-to-vulnerability correlation, compliance monitoring pipelines (e.g., trade sanctions, regulatory requirements), and continuous scanning coverage across diverse environments.
- Design, build, and maintain automated workflows and tooling (Python, AI/ML) to reduce manual toil, improve response times, and enable the team to operate at scale across thousands of accounts and services.
- Conduct proactive threat hunting across vulnerability and asset data to identify security risks, attack patterns, and gaps in coverage before they are exploited.
- Drive remediation outcomes by collaborating with engineering teams across multiple organizations - providing technical guidance, root-cause analysis, and remediation recommendations.
- Manage security exception processes, evaluating risk justifications, coordinating approvals, and tracking compliance with exception conditions.
- Own security remediation campaigns end-to-end including scoping affected owners, progress tracking, stakeholder communication, and risk tradeoff analysis across large distributed environments.
- Perform security code reviews, root-cause analysis on high-severity findings, and architecture assessments. Validate remediation fixes in code and identify systemic vulnerability patterns that can be prevented upstream.
- Maintain operational metrics, reporting dashboards, and executive-level risk summaries. Participate in periodic on-call responsibilities for continuous monitoring and time-sensitive vulnerability response.
- Maintain clear documentation of processes, review outcomes, security decisions, and runbooks. Mentor team members on technical approaches and operational procedures.
Qualifications
- Bachelor's degree in computer science or equivalent
- 5+ years of IT Security experience
- Knowledge of industry-based security vulnerabilities and remediation techniques
- Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)