Security Engineer, Infrastructure Application Security

About the role

AWS Security protects the cloud computing environment that millions of customers rely on every day. Our infrastructure security team works directly with the engineers who design, build, and operate AWS data center and infrastructure services, helping them ship securely from the start. We're looking for a Security Engineer to join our team and provide hands-on security engineering support to infrastructure builders across AWS.

Responsibilities

• Conduct security design reviews and threat modeling for infrastructure services, identifying risks and providing clear remediation guidance to partner teams
• Perform manual and automated secure code review across infrastructure codebases
• Provide security architecture and design guidance to builders at the ideation and implementation stages
• Develop and maintain security automation tools that scale review processes across the infrastructure portfolio
• Document findings, track remediation progress, and verify fixes with partner teams
• Deliver security training and outreach to internal infrastructure development teams
• Identify and escalate high-severity security issues through appropriate channels, aligned to launch timelines

Qualifications

• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance
• Experience applying threat modeling or other risk identification techniques or equivalent