Software Privacy Engineer, Devices & Services Trust, Privacy, and Accessibility (TPA)

About the role

Devices and Services Trust and Privacy (DSTP) is responsible for maintaining and raising the trust bar for Amazon customers across a diverse set of 30+ Devices and Services (D&S). DSTP offers horizontal services for builders to ensure trust, privacy, and accessibility is built into our products and services. We also build customer-facing capabilities that provide customers with control and transparency while reducing privacy risk, and enable partner teams to innovate with appropriate guardrails for content moderation, privacy, accessibility, and trust. The DSTP team is looking for a passionate Security and Privacy Incident Response Engineer who can lead the response to privacy and data protection issues across Devices & Services. You must thrive in dynamic/ambiguous situations, and think like both an attacker and defender, while working through the entire incident response lifecycle. You’ll be working in a global team environment where clear and accurate communication and collaboration on privacy and data protection issues is critical. In this role, you will apply your creative and critical problem solving skills to quickly contain incidents and then work with cross-functional teams to remediate the root cause. You must have a passion for engineering solutions to complex privacy and data governance challenges, and recognize and fill gaps in capabilities. Above all, you should be passionate about privacy, information security, the ever‑changing threat landscape and privacy/security automation and tooling.

Responsibilities

• Manage escalated privacy and trust risk events/cases from start to finish; write detailed case notes, reports, summaries, short and long‑term recommendations, and trade‑off analyses for all audiences, including senior leadership.
• Interact with and influence other teams (e.g., service teams, engineering, product, legal); identify experts and stakeholders on other teams to support decisions on containing incidents or mitigating privacy and trust risks; build consensus and recommendations based on analysis of the nature of potential violations to Privacy Policies, Promises, or Legal/Regulatory requirements.
• Own successful delivery of large, impactful, and highly cross‑functional program initiatives while simultaneously tracking a set of smaller projects.
• Demonstrate comfort with handling technical investigations and