Security Engineer: GenAI for HR & Legal Apps

Amazon; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon seeks a Security Engineer for the SEALS team to threat model GenAI-backed HR and Legal applications, build secure workflows, and write detection rules. You will embed with builder teams, own security outcomes, and drive risk reduction across the development lifecycle.

Strong candidates will have 3+ years in coding and security, plus experience with AWS, Python/Java/C++, and secure coding practices. This role is based in Seattle, WA, with a mature security-first culture.

Qualifications

• 3+ years programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language experience.
• 2+ years scripting, programming, and security code review in a common language (non-internship).
• 2+ years troubleshooting systems issues, analyzing logs, or automating basic tasks (non-internship).
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Experience with AWS products and services.

Responsibilities

• Own the security outcomes for SEALS builder teams and their HR/Legal apps.
• Threat model GenAI and LLM-backed apps, covering prompt injection and data leakage.
• Secure agentic workflows with transitive authentication and scoped authorization.
• Author and refine automated detection rules for code commits.
• Use GenAI to scale delivery, including AI-assisted code review and detection writing.
• Drive secure CDK blueprints and standardized authorizations across domains.
• Mentor peers and communicate risk clearly to leadership.

Skills

Threat modeling

Secure coding

Secure code review

Python

Java

C++

Education

Bachelor's degree in Computer Science or equivalent

Bachelor's degree in STEM or IT Security

Tools

AWS

Git

Docker

Kubernetes

Job description

Amazon seeks a Security Engineer for the SEALS team to threat model GenAI-backed HR and Legal applications, build secure workflows, and write detection rules. You will embed with builder teams, own security outcomes, and drive risk reduction across the development lifecycle.

Strong candidates will have 3+ years in coding and security, plus experience with AWS, Python/Java/C++, and secure coding practices. This role is based in Seattle, WA, with a mature security-first culture.