Security Engineer I: Proactive Third-Party Tool Security

Amazon Inc.; Arlington (VA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

RSUs

Paid time off

Job summary

Amazon.com Services LLC is seeking a Security Engineer I to assess third-party services, identify risks, and contribute to automation that codifies security decisions. You will collaborate with service teams and senior engineers to drive risk-aware decisions across the organization.

You will write scripts to automate validation steps and refine security rubrics so future engineers can build on your findings, enabling scalable protections for customers worldwide.

Qualifications

• 2+ years of web protocols, common security attacks, and remediation experience.
• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing.
• Experience with web protocols, common security attacks, and remediation (non-internship).
• Experience solving basic problems by writing code or scripts with some assistance.

Responsibilities

• Perform security reviews of third-party services and propose mitigations.
• Trace data flows, threat model use cases, and surface risks for remediation decisions.
• Contribute to AI-powered security tooling and automation across the organization.
• Communicate risks and recommendations to service teams and leadership.
• Draft security decision rubrics for future engineers to follow.

Skills

Web protocols

Security reviews

Code scripting

Threat modelling

Education

Bachelor's degree in Engineering or CS

Tools

AWS

Job description

Amazon.com Services LLC is seeking a Security Engineer I to assess third-party services, identify risks, and contribute to automation that codifies security decisions. You will collaborate with service teams and senior engineers to drive risk-aware decisions across the organization.

You will write scripts to automate validation steps and refine security rubrics so future engineers can build on your findings, enabling scalable protections for customers worldwide.