Security Engineer I, AWS Proactive Security Team

VulnU; Seattle (WA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Paid parental leave

Retirement match

Equity

Flexible PTO

Job summary

Amazon seeks a Security Engineer I on the AWS Proactive Security Team in Seattle, WA to safeguard applications and infrastructure at scale. You will analyze software across teams, review code for security weaknesses, and contribute to tooling and runbooks to detect and respond to issues.

You'll collaborate with developers to embed security into the SDLC, communicate risks clearly, and grow your expertise across security domains while advancing customer trust in Amazon's services.

Qualifications

• 2+ years of web protocols, security attacks, and remediation experience.
• Bachelor's degree in Engineering, Computer Science, or related field.
• Knowledge of system security vulnerabilities and remediation techniques.
• Experience with AWS services or other cloud offerings.

Responsibilities

• Analyze software and services to identify security requirements, model threats, and pinpoint vulnerabilities.
• Conduct security code reviews to evaluate source code for weaknesses and remediation strategies.
• Contribute to runbooks, automation scripts, and security tooling for scalable detection and response.
• Collaborate with development teams to embed security into the software development lifecycle.

Skills

Web protocols

Security attacks knowledge

Remediation techniques

Coding/scripting

AWS / Cloud experience

Education

Bachelor's degree in Engineering/CS or related field

Tools

AWS

Cloud offerings

Job description

# Security Engineer I, AWS Proactive Security TeamAmazon · amazon.comCategory: Cloud SecurityLocation: Seattle, Washington, USA## Quality of lifeWhat the posting states. Hover or tap a perk to see the line it came from.* Paid parental leave* Retirement match* Equity* Flexible PTOAre you passionate about protecting systems and data at massive scale? As a Security Engineer I at Amazon, you will help safeguard the applications and infrastructure that millions of customers rely on every day. In this role, you will work alongside experienced security engineers to identify and reduce security risks, conduct threat analysis, and contribute to building secure solutions. You will gain hands-on experience across security domains while making a meaningful impact on customer trust and the overall security posture of the services you support.Key job responsibilities- Analyze software and services to identify security requirements, model threats, and pinpoint potential vulnerabilities across your team's scope of responsibility.- Conduct security code reviews to evaluate source code for vulnerabilities, weaknesses in implementation, and deviations from secure coding practices, recommending specific remediation strategies.- Contribute to runbooks, automation scripts, and security tooling that improve your team's ability to detect and respond to security issues at scale.- Collaborate with development teams and peers to embed security into the software development lifecycle, from design through testing and deployment.- Communicate security risks clearly in written and verbal form to your team, partner teams, and direct leadership, driving actionable outcomes.A day in the lifeYour morning might start by reviewing the results of a recent security assessment and triaging findings with your team. After standup, you could spend time performing a code review for a partner team's new service, flagging areas where input handling needs strengthening. In the afternoon, you might update a runbook based on lessons learned from a recent incident, or write a script to automate a repetitive security check. You will regularly connect with development engineers and more senior security engineers to discuss design decisions and learn new approaches.About the teamOur team is focused on reducing security risk across Amazon's products and services, ensuring that customers can trust the systems they interact with every day. We work closely with engineering teams to promote secure development practices and build preventive and detective controls. We value curiosity and continuous learning, and we are committed to creating an inclusive environment where every team member's perspective strengthens our security mission.Diverse ExperiencesAmazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Why Amazon Security?At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.Inclusive Team CultureIn Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.Training & Career GrowthWe’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life BalanceWe value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.-2+ years of web protocols, common security attacks, and remediation (non-internship) experience-Bachelor's degree in Engineering, Computer Science, or a related field-Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent-Experience with web protocols, common security attacks, and remediation (non-internship)-Experience solving basic problems by writing code or scripts with some assistance-Experience with AWS services or other cloud offeringsThe base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.USA, TX, Austin - 136,000.00 - 184,000.00 USD annuallyUSA, WA, Seattle - 136,000.00 - 184,000.00 USD annually