Security Engineer, AWS Security

Cybersecurity Jobs; Arlington (VA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Sign-on payments

RSUs

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon.com Services LLC is hiring a Security Engineer to evaluate AWS service designs, run security assessments, and help teams ship with strong application security.

In this role you will perform security-focused design reviews, conduct threat modeling, coordinate penetration testing, and guide teams on secure coding, authentication, and data protection. The position is based in Arlington, VA on-site with competitive benefits.

Qualifications

• Bachelor’s degree in Engineering, CS, or related field required.
• 2+ years of web security experience and remediation.
• Knowledge of system security vulnerabilities and remediation techniques.
• Experience with writing code or scripts to solve problems.
• Experience with AWS services or other cloud offerings.

Responsibilities

• Perform security-focused design reviews for new and existing services.
• Run threat modeling exercises to identify attack vectors.
• Coordinate penetration testing to validate controls.
• Document findings and provide remediation guidance.
• Verify remediation actions are implemented.
• Advise on secure coding practices, authentication, cryptography, and data protection.
• Identify high-severity issues and escalate appropriately.
• Maintain documentation of review outcomes and risk assessments.
• Use automated tools to support reviews and improve efficiency.

Skills

Web security fundamentals

Threat modeling

Penetration testing

Scripting / coding

Cloud security

Education

Bachelor’s degree in Engineering or CS

Tools

AWS

Job description

Amazon.com Services LLC is hiring a Security Engineer to evaluate AWS service designs, run security assessments, and help teams ship with strong application security.

Responsibilities

• Perform security-focused design reviews for new and existing services by assessing architecture documents and system designs for risk
• Run structured threat modeling exercises to find attack vectors and weaknesses in application architectures
• Coordinate penetration testing to validate security controls and surface exploitable vulnerabilities
• Document, track, and communicate security findings to service teams, including clear remediation guidance
• Verify that remediation actions are implemented after findings are addressed
• Advise development teams on secure coding practices, authentication and authorization, cryptographic implementations, and data protection strategies
• Identify high-severity issues and elevate through appropriate channels, supporting timely fixes aligned with launch timelines
• Maintain clear documentation of review outcomes, security decisions, and risk assessments
• Use automated tools to support reviews and improve review efficiency

Requirements

• 2+ years of web protocols, common security attacks, and remediation experience (non-internship)
• Bachelor’s degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent experience
• Experience solving basic problems by writing code or scripts with some assistance
• Experience with AWS services or other cloud offerings

Technology

• AWS

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave

Location: Arlington, VA (onsite)

Salary range: USD 136,000 - 184,000 per year