Embedded Security Engineer: Secure-by-Design & Automation

Amazon; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com, Seattle, seeks a Security Engineer to shape application security by embedding secure-by-default principles throughout the software development lifecycle. You will review designs, guide secure coding, and contribute code for security fixes alongside developers to create scalable, automated security guardrails and paved paths.

The role emphasizes threat modeling, secure architecture guidance, and collaboration with development teams to shift manual reviews to automated assessments.

Qualifications

• Bachelor's degree in computer science or equivalent.
• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.

Responsibilities

• Design, build, and maintain automated security guardrails and paved paths enabling secure-by-default practices across Amazon's technology landscape.
• Engage early with development teams to embed security into applications from the start, advising on secure architecture and coding practices.
• Build automated, continuous security assessment capabilities to replace manual reviews and scale across the unit.
• Contribute code for security fixes and paved path solutions alongside developers.
• Partner with developers to build scalable, self-service security tools for rapid issue remediation.
• Design and implement preventive and detective security controls providing continuous assurance.
• Collaborate with stakeholders to define and drive long-term security strategy and participate in on-call rotations.

Skills

Python

Ruby

Go

Swift

Java

C++

Education

Bachelor's degree in computer science or equivalent

Tools

AWS

Job description

Amazon.com, Seattle, seeks a Security Engineer to shape application security by embedding secure-by-default principles throughout the software development lifecycle. You will review designs, guide secure coding, and contribute code for security fixes alongside developers to create scalable, automated security guardrails and paved paths.

The role emphasizes threat modeling, secure architecture guidance, and collaboration with development teams to shift manual reviews to automated assessments.