Senior Security Engineer, Ads Security

About the role

The ideal candidate will have a broad understanding of proactive security, have past experience leading security assessments, and have the ability to work with product and engineering teams in designing secure systems. In this role, you will conduct secure design reviews, code review and penetration testing, develop custom tools and frameworks to assist in proactive security and collaborate with product and engineering teams to build secure and resilient solutions. Your role will be pivotal in ensuring the protection of customer data and critical infrastructure within the Ads organization.

Key job responsibilities

• Conduct threat modeling, code review and penetration testing to identify security vulnerabilities in advertising applications and infrastructure.
• Contribute to security automation tooling for designing new detections within Amazon’s various security detection frameworks.
• Identify actionable solutions for identified vulnerabilities and collaborate with ads product and engineering teams to influence and prioritize their resolution.
• Contribute to fostering a strong security culture at Amazon through knowledge sharing and collaboration.
• Engage in cross-team projects aimed at enhancing the security posture of Amazon and customer data throughout its lifecycle.

A day in the life

Activities in this role include: • Identifying security vulnerabilities in advertising applications and infrastructure. • Influencing product teams and senior leadership to implement practices that maintain a high security bar. • Proposing, collaborating & obtaining buy-in on strategic security initiatives. • Recommending and developing security-focused tools that help product teams prevent security misconfiguration & vulnerabilities at scale.

About the team

Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic Qualifications

• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques

Preferred Qualifications

• Experience with securing GenAI powered applications and agentic systems