The posting
Are you passionate about solving complex security challenges at scale? We are looking for a Security Engineer to join our team and help protect Amazon's products, services, and customers. In this role, you will tackle large, ambiguous security problems - designing and validating security controls, conducting threat modeling, and driving risk mitigation strategies that have broad and lasting impact. You will work across teams to ensure that systems are built securely from the ground up, balancing pragmatic trade-offs with long-term security goals. If you are a collaborative problem solver who thrives in technical depth and wants to shape how security is practiced across an organization, this role offers the opportunity to do meaningful work at remarkable scale.
Key job responsibilities - Lead security reviews, threat modeling, and architecture assessments for complex systems, identifying risks and guiding teams toward pragmatic, scalable mitigations. - Design and build security frameworks, runbooks, and rubrics for emerging problem domains, enabling repeatable and consistent security outcomes across multiple teams. - Partner with product and system owners to proactively design, implement, and validate security controls, ensuring solutions are extensible and have low adoption costs. - Evaluate source code and system designs to identify vulnerabilities, recommend remediation strategies, and set a culture of secure engineering best practices including authentication, authorization, and least-privilege principles. - Communicate security risk and design decisions clearly in writing to both technical and non-technical audiences, and mentor other engineers to raise the security bar across the organization.
A day in the life You might start your morning reviewing a security design proposal from a partner team, identifying gaps in their authentication model and working with them to close those gaps before launch. After that, you could be building out a new threat-modeling rubric that will help dozens of teams assess risk consistently. In the afternoon, you may join an incident response discussion, analyzing root causes and recommending controls that prevent recurrence. Throughout it all, you collaborate with engineers, share your expertise, and help shape the security direction for your organization.
About the team Our team is committed to maintaining the highest security standards across Amazon's products and services. We work at the intersection of security engineering and product development, partnering closely with builders to ensure that what we ship is secure by design. We value an inclusive team culture where every voice is heard and where engineers at all levels are encouraged to grow. Whether you are refining how we approach risk at scale or mentoring the next generation of security engineers, you will play a key role in our mission to earn and keep customer trust.
- 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience - Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go - Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques - Experience as a mentor, tech lead or leading an engineering team
- Experience applying threat modeling or other risk identification techniques or equivalent - Experience with security in service-oriented architectures/microservices and web services
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually
