Container Security Engineer II - Vulnerability Management

Amazon Inc.; Arlington (VA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

401(k)

Job summary

Amazon in Arlington, VA is seeking a Security Engineer II to join the AVM Container Domain, focusing on securing how Amazon builds and runs containers across ECS, EKS, and SageMaker. You will analyze vulnerabilities, triage findings, and drive remediation with partner teams.

You will contribute to scalable risk assessments, develop automation, and participate in on-call rotations to maintain container security across the AWS environment.

Qualifications

• 2+ years of scripting, programming, and security code review (non-internship)
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks with CLI
• Bachelor's degree in STEM or 2+ years IT Security experience
• Knowledge of HTTP, DNS, TCP/IP
• Knowledge of security vulnerabilities and remediation techniques

Responsibilities

• Analyze vulnerability disclosures, focusing on container images, base layers, and orchestration platforms (ECS, EKS, SageMaker)
• Assess technical details and impact of container vulnerabilities across AWS infrastructure
• Investigate and triage findings, assess severity and scope of risk
• Support remediation efforts, partnering with builder teams to fix container security issues
• Design automation, tooling, and workflows to improve patch deployment and remediation

Skills

Scripting experience

Troubleshooting

Networking knowledge

Security code review

Education

Bachelor's degree in STEM

Tools

Python

Java

C++

Job description

Amazon in Arlington, VA is seeking a Security Engineer II to join the AVM Container Domain, focusing on securing how Amazon builds and runs containers across ECS, EKS, and SageMaker. You will analyze vulnerabilities, triage findings, and drive remediation with partner teams.

You will contribute to scalable risk assessments, develop automation, and participate in on-call rotations to maintain container security across the AWS environment.