Security Engineer I, Secure Third Party Tools (S3T)

Amazon Inc.; Arlington (VA); On-site; USD 136,000 - 184,000; Full time

Benefits offered by this job

Health insurance

RSUs

Paid time off

Job summary

Amazon.com Services LLC is seeking a Security Engineer I to assess third-party services, identify risks, and contribute to automation that codifies security decisions. You will collaborate with service teams and senior engineers to drive risk-aware decisions across the organization.

You will write scripts to automate validation steps and refine security rubrics so future engineers can build on your findings, enabling scalable protections for customers worldwide.

Qualifications

• 2+ years of web protocols, common security attacks, and remediation experience.
• Bachelor's degree in Engineering, Computer Science, or a related field.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing.
• Experience with web protocols, common security attacks, and remediation (non-internship).
• Experience solving basic problems by writing code or scripts with some assistance.

Responsibilities

• Perform security reviews of third-party services and propose mitigations.
• Trace data flows, threat model use cases, and surface risks for remediation decisions.
• Contribute to AI-powered security tooling and automation across the organization.
• Communicate risks and recommendations to service teams and leadership.
• Draft security decision rubrics for future engineers to follow.

Skills

Web protocols

Security reviews

Code scripting

Threat modelling

Education

Bachelor's degree in Engineering or CS

Tools

AWS

Job description

Security Engineer I, Secure Third Party Tools (S3T)

Job ID: 10585308 | Amazon.com Services LLC

Are you motivated to protect customers at scale by building security into every third-party interaction? The Secure Third Party Tools (S3T) team within Amazon Security is shifting how we safeguard customer trust — moving from reactive assessments to proactive, automated protection. As a Security Engineer on this team, you will combine technical review expertise with a builder's mindset to evaluate third-party services, identify risks, and contribute to tooling that codifies security decisions into repeatable automation. You'll collaborate closely with service teams and senior security engineers, communicating risk clearly and driving resolution. This is a role for someone who is curious, adaptable, and eager to grow their security engineering craft while strengthening how Amazon manages vendor risk.

Key job responsibilities

• Perform technical security reviews of third-party services — including AI/ML integrations, cloud architectures, and services handling sensitive customer data — identifying gaps in security controls and recommending mitigations.
• Trace data flows through complex systems, threat model third-party use cases, and evaluate vendor penetration test reports to surface risks and drive proportionate remediation decisions.
• Contribute to AI-powered security tooling and automation that scales review decisions across the organization, scripting solutions and improving existing runbooks.
• Communicate identified risks and recommendations in written and verbal form to service teams and leadership, escalating where appropriate to drive resolution.
• Author and refine security decision rubrics and implementation patterns so that future engineers can build upon your findings.

A day in the life

You start by picking up a new third-party engagement, reviewing the architecture diagrams and data-flow documentation the service team has provided. You apply threat modeling to identify where sensitive data crosses trust boundaries, then draft your findings and discuss them with a senior engineer during a checkpoint. After lunch you might write a script to automate a repetitive validation step, or update the team's internal tooling with a new decision pattern you've identified. Your work feeds directly into the automation that makes the next review faster and more consistent.

About the team

The S3T team sits within Amazon Security and is responsible for evaluating and securing third-party services used across the company. The team is composed of security engineers at multiple levels who partner closely with builder teams, legal, and privacy stakeholders. Our mission is to scale security through software — encoding high-judgment decisions into automation so we can protect customers worldwide without growing linearly. We are building toward a future where every third-party integration is assessed proactively and continuously, and we are looking for engineers who want to help shape that vision.

Basic Qualifications

• 2+ years of web protocols, common security attacks, and remediation (non-internship) experience
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance

Preferred Qualifications

• Experience with AWS services or other cloud offerings

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

USA, VA, Arlington - 136,000.00 - 184,000.00 USD annually

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. Veterans, military spouses, and people with disabilities are encouraged to apply.