Security Engineer III: Proactive Cloud Defense

Amazon; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

RSUs

Job summary

Amazon is seeking a Security Engineer III to lead security risk reduction efforts across teams at massive scale. You will design and validate security controls, conduct in-depth reviews, and build scalable frameworks that lower cost and friction for builders across services relied on by millions of customers.

You will mentor engineers, drive secure design decisions, and engage with product owners to review architectures.

Qualifications

• 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
• 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
• 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
• Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
• Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
• Experience as a mentor, tech lead or leading an engineering team

Responsibilities

• Lead complex security reviews, threat modeling exercises, and security investigations across your team and partner teams, identifying risks and driving pragmatic mitigation strategies that reduce overall security exposure
• Design and build security frameworks, runbooks, and rubrics for new problem domains, enabling other engineers to apply your work in a repeatable and scalable way across the organization
• Engage proactively with product and system owners to review architectures, validate security controls, and guide teams through secure design decisions - including reviewing or writing code, scripts, and detections
• Communicate security risk and design decisions clearly in writing for both technical and non-technical audiences, and lead inclusive discussions to build consensus when navigating conflicting priorities or trade-offs
• Mentor and coach multiple security engineers, contribute to hiring assessments, and help establish mature security practices including alarms, telemetry, runbooks, and retrospective processes for your team

Skills

Troubleshooting

Security risk assessment

Scripting

Scala/Java/Python

Mentoring/leadership

Threat modeling

Job description

Amazon is seeking a Security Engineer III to lead security risk reduction efforts across teams at massive scale. You will design and validate security controls, conduct in-depth reviews, and build scalable frameworks that lower cost and friction for builders across services relied on by millions of customers.

You will mentor engineers, drive secure design decisions, and engage with product owners to review architectures.