Cloud Security Engineer I — Proactive AWS Threat Defense

Amazon Web Services (AWS); Austin (TX); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

Sign-on bonus

RSUs

401(k) matching

Paid time off

Job summary

Amazon.com Services LLC is seeking a Security Engineer I to help protect applications and infrastructure at massive scale. You will work with experienced security engineers to identify risks, perform threat analysis, and build secure solutions across services.

You will gain hands-on experience in security domains, contributing to secure development practices and robust incident response, while delivering measurable improvements to customer trust and security posture.

Qualifications

• Bachelor's degree in Engineering, Computer Science, or related field.
• 2+ years of web protocols, security attacks, and remediation experience.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploits.
• Experience with web protocols and remediation (non-internship).
• Experience solving basic problems by writing code or scripts.

Responsibilities

• Analyze software and services to identify security requirements, model threats, and pinpoint vulnerabilities.
• Conduct security code reviews to evaluate source code and remediate weaknesses.
• Contribute to runbooks, automation scripts, and security tooling for scalable detection and response.
• Collaborate with development teams to embed security into the SDLC from design through testing.
• Communicate security risks clearly to team and leadership.

Skills

Web protocols

Security testing

Threat analysis

Scripting/Code

Education

Bachelor's degree in Engineering/CS

Tools

None

Job description

Amazon.com Services LLC is seeking a Security Engineer I to help protect applications and infrastructure at massive scale. You will work with experienced security engineers to identify risks, perform threat analysis, and build secure solutions across services.

You will gain hands-on experience in security domains, contributing to secure development practices and robust incident response, while delivering measurable improvements to customer trust and security posture.