Security Engineer II, AWS Vulnerability Management, Third Party Software

Cybersecurity Jobs; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon's security engineering team is seeking a Security Engineer II to help protect AWS applications by identifying vulnerabilities in third-party software and open source libraries. You will build end-to-end tracking and remediation mechanisms to enable timely updates across the AWS fleet.

You will work on large-scale remediation projects, develop security automation using GenAI tooling, and provide security metrics to drive process improvements.

Qualifications

• 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar OO language.
• Bachelor’s degree in computer science or equivalent.
• Knowledge of networking protocols including HTTP, DNS, and TCP/IP.
• Experience using AI tools to support or enhance security engineering work.
• Knowledge of industry-based security vulnerabilities and remediation techniques.
• 2+ years of combination of threat modeling, secure coding, identity management, and related security work.
• Experience with AWS products and services.
• Experience with programming languages such as Python, Java, C++.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing.
• Experience owning projects, timelines, and independent execution.

Responsibilities

• Analyze third-party software and open source vulnerabilities, maintaining an opinionated view on which issues present the greatest risk to customers.
• Build end-to-end tracking, monitoring, and remediation mechanisms so service teams can update third-party software with zero builder cost.
• Drive large-scale, high-impact remediation efforts and respond quickly to new threat scenarios.
• Develop security automation and use GenAI tooling to increase impact across the environment.
• Provide security metrics and drive process improvements.

Skills

Programming languages

Networking protocols

AI tools

Security vulnerabilities

Threat modeling & secure coding

AWS

Penetration testing

Project ownership

GenAI tooling

Education

Bachelor's degree in CS or equivalent

Tools

GenAI tooling

Job description

Within Amazon’s security engineering organization, this role supports AWS application and service teams by focusing on vulnerabilities in third-party software and open source libraries. As an Security Engineer II, you will help create mechanisms that track, monitor, and remediate issues at scale, enabling timely package updates across the AWS fleet.

What You’ll Do

• Analyze third-party software and open source vulnerabilities, maintaining an opinionated view on which issues present the greatest risk to customers.
• Build end-to-end tracking, monitoring, and remediation mechanisms so service teams can update third-party software with zero builder cost.
• Drive large-scale, high-impact remediation efforts and respond quickly to new threat scenarios.
• Develop security automation and use GenAI tooling to increase impact across the environment.
• Provide security metrics and drive process improvements.

Required Qualifications

• 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object oriented language.
• Bachelor’s degree in computer science or equivalent.
• Knowledge of networking protocols including HTTP, DNS, and TCP/IP.
• Experience using AI tools to support or enhance security engineering work.
• Knowledge of industry-based security vulnerabilities and remediation techniques.
• 2+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security experience.
• Experience with AWS products and services.
• Experience with programming languages such as Python, Java, C++.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and development of exploits (or equivalent).
• Experience owning projects, communicating timelines, and executing independently.

Tools and Technologies

• Python, Ruby, Go, Swift, Java, .Net, C++, HTTP, DNS, TCP/IP
• GenAI

Compensation and Location

• Location: Austin, TX (onsite)
• Salary: USD 159,300 - 202,400 per year

Benefits

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D, and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave

Team Context

• Diverse Experiences
• Inclusive Team Culture
• Training & Career Growth
• Work/Life Balance