Security Engineer II: Open Source & Third-Party Security

Amazon Web Services (AWS); Austin (TX); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

RSUs

Comprehensive benefits

Job summary

Amazon Security is seeking a Security Engineer to manage vulnerabilities in third-party software and open source libraries used by AWS applications and services. You will create mechanisms that make updating vulnerable packages a natural part of the software development lifecycle and mentor junior engineers across the team.

You will handle complex challenges to scale vulnerability management across AWS infrastructure, drive remediation at scale, and contribute security thought leadership while

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar OO language.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Experience using AI tools to support or enhance security engineering work.

Responsibilities

• Analyze and manage third-party software vulnerabilities across AWS applications.
• Build end-to-end tracking and remediation mechanisms for updating vulnerable packages.
• Drive large-scale remediation efforts and respond to new threat scenarios.
• Develop security automation and leverage GenAI tooling to scale impact.
• Deliver security metrics and improvements across teams.

Skills

Programming: Python/Java/C++

Networking protocols (HTTP/DNS/TCP/IP)

AI tools for security

Security vulnerability management

Education

Bachelor's degree in computer science or equivalent

Job description

Amazon Security is seeking a Security Engineer to manage vulnerabilities in third-party software and open source libraries used by AWS applications and services. You will create mechanisms that make updating vulnerable packages a natural part of the software development lifecycle and mentor junior engineers across the team.

You will handle complex challenges to scale vulnerability management across AWS infrastructure, drive remediation at scale, and contribute security thought leadership while