Security Engineer II - Third-Party Vulnerability Mgmt

Amazon Inc.; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance (medical, dental, &

Job summary

Amazon.com Services LLC is seeking a Security Engineer II for AWS Vulnerability Management focusing on third-party software. You will identify, track, and mitigate vulnerabilities across AWS open source libraries and third-party components.

Join a team that scales vulnerability management for a growing AWS fleet, building end-to-end tracking, automation, and remediation mechanisms while mentoring junior engineers and contributing to security thought leadership.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• Bachelor's degree in computer science or equivalent.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Experience using AI tools to support or enhance security engineering work.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Responsibilities

• Analyze third-party software and open source vulnerabilities, holding an opinionated view of which pose the greatest risk to our customers
• Build end-to-end tracking, monitoring, and remediation mechanisms that enable service teams to update third-party software at zero builder cost
• Drive large-scale, high-impact remediation and react quickly to new threat scenarios
• Build security automation and use GenAI tooling to scale your impact across the fleet
• Deliver security metrics and process improvements

Skills

Python

Java

C++

Networking basics

AI tooling for security

Education

Bachelor's degree in computer science or equivalent

Tools

AWS

Job description

Amazon.com Services LLC is seeking a Security Engineer II for AWS Vulnerability Management focusing on third-party software. You will identify, track, and mitigate vulnerabilities across AWS open source libraries and third-party components.

Join a team that scales vulnerability management for a growing AWS fleet, building end-to-end tracking, automation, and remediation mechanisms while mentoring junior engineers and contributing to security thought leadership.