App Security Engineer - Secure-by-Design & Automation

Amazon; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com Services LLC in Austin, TX is seeking a Security Engineer to design and implement secure-by-default software solutions. You will review designs for security gaps, contribute code for fixes, and build scalable security tools that replace manual reviews.

You’ll embed security early in the SDLC and partner with development teams to raise the security bar across Amazon's services. You’ll work with a team of security engineers and TPMs to protect customer data, while shaping long-term

Responsibilities

• Design, build, and maintain automated security guardrails and paved paths that enable secure-by-default practices across Amazon's technology landscape
• Engage early with development teams at the ideation and design stage to embed security into applications from the start, providing guidance on secure architecture and coding practices
• Build automated, continuous security assessment capabilities that replace manual security reviews and scale across our business unit
• Contribute code for security fixes and paved path solutions directly alongside developers, making the secure path the easy path
• Partner with developers to build scalable, self-service security tools that enable teams to identify and remediate security risks without bottlenecking on security teams
• Design and implement preventive and detective security controls that provide continuous assurance rather than point-in-time assessments
• Collaborate with security stakeholders to define and drive the long-term security strategy and participate in periodic on-call rotations to support security incidents

Job description

Amazon.com Services LLC in Austin, TX is seeking a Security Engineer to design and implement secure-by-default software solutions. You will review designs for security gaps, contribute code for fixes, and build scalable security tools that replace manual reviews.

You’ll embed security early in the SDLC and partner with development teams to raise the security bar across Amazon's services. You’ll work with a team of security engineers and TPMs to protect customer data, while shaping long-term