Sr. Security Engineer, Proactive Security

About the role

AWS Security tackles a wide variety of security challenges across cloud services, Internet of Things (IoT), identity and access management, mobile devices, virtualization, and custom hardware at massive scale. The team is highly collaborative and committed to each member’s growth. Amazon is seeking a Sr. Application Security Engineer to validate that services, applications, and websites meet the highest security standards. The role involves analyzing application and service security, discovering and addressing issues, building security automation, and reacting quickly to new threat scenarios. The engineer will learn from and be mentored by leaders building and securing innovative services, contribute across multiple domains, develop elegant solutions to complex problems, mentor junior engineers, and act as a security thought leader. Participation in team planning, process improvement, and deep expertise in at least one specialty are expected.

Responsibilities

• Application security reviews (architecture reviews, threat modeling, code reviews, and security testing)
• Mobile security reviews
• Projects and research work as needed
• Security training and outreach to internal development teams
• Security guidance and documentation
• Security workflow automation
• Security metrics delivery and process improvements
• Assistance with recruiting activities and administrative work

Qualifications

• 5+ years of experience in any combination of application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing
• 5+ years of full secure software development life cycle experience, including coding standards, code reviews, source control management, build processes, testing, and operations
• 4+ years of (non‑internship) scripting, programming, and security code review in common programming languages
• Knowledge of at least two of the following languages: Scala, Java, Python, C/C++, or Go
• Bachelor’s degree in Computer Science or a related field
• Experience identifying security issues and risks and developing mitigation plans
• Experience (non‑internship) identifying security vulnerabilities, attack patterns, and remediation techniques
• Experience as a mentor, tech lead, or leading an engineering team
• Knowledge of common software security vulnerabilities (e.g., OWASP Top 10) and remediation techniques
• Knowledge of basic networking and network security concepts (TCP/UDP, firewalls/switches, Wi‑Fi security, TLS, etc.)

Preferred Qualifications

• Experience applying threat modeling or other risk identification techniques
• Experience with security in service‑oriented architectures/microservices and web services
• Experience with device technologies under development, including firmware flashing, device debugging, and log analysis, or technical support experience
• Experience with security engineering and assurance methodologies such as fuzzing, static and dynamic code analysis
• Ability to drive multiple technically complex security reviews while providing effective guidance to stakeholders

About the Team

Amazon Security values diverse experiences and encourages candidates from non‑traditional backgrounds to apply. The organization maintains a high security bar across all Amazon products and services, offering opportunities to work on cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The team fosters an inclusive culture that promotes learning, curiosity, and DEI events. Continuous knowledge‑sharing, training, and career‑advancing resources help professionals grow. Flexible work hours and arrangements support work‑life harmony, ensuring personal well‑being alongside professional success.

Pay

Base salary range: $178,400 – $226,700 USD annually. Compensation includes sign‑on payments and restricted stock units (RSUs). Final compensation is determined based on experience, qualifications, and location.

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription)
• Basic Life & AD&D insurance with optional supplemental life plans
• Employee Assistance Program (EAP) and mental health support
• Medical advice line
• Flexible Spending Accounts
• Adoption and surrogacy reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave