Senior Security Engineer - AWS Human Access Security

Amazon; Arlington (VA); On-site; USD 178,400 - 226,700; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon AWS AHAS is seeking a Senior Security Engineer embedded with the AHAS software development team to own security design decisions for operator-access tooling. You will identify high-risk access patterns, quantify risk with data, and partner with teams across AWS to move access to lower-risk patterns or remove it.

You will mentor engineers, drive remediation, and build measurement and detection capabilities to show where risky access exists and whether it is trending down.

Qualifications

• 5+ years of troubleshooting systems issues and log analysis.
• 5+ years identifying security risks and developing mitigation plans.
• 5+ years scripting, programming and security code review.
• Knowledge of at least two of Scala, Java, Python, C/C++, or Go.
• Experience mentoring, tech lead, or leading an engineering team.

Responsibilities

• Define high-risk human access and risk patterns for production systems.
• Drive design decisions to lower access risk with scoped credentials and auditable access.
• Partner with AWS engineering teams to reduce risky access and measure reductions.
• Build measurement and detection capabilities to show risky access and trends.
• Investigate security issues and turn findings into durable tooling improvements.
• Mentor software and security engineers and represent security posture to leadership.

Skills

Troubleshooting & automation

Security risk identification

Scripting & programming

Security code review

Scala

Java

Python

C/C++

Go

Mentoring/leadership

Job description

Amazon AWS AHAS is seeking a Senior Security Engineer embedded with the AHAS software development team to own security design decisions for operator-access tooling. You will identify high-risk access patterns, quantify risk with data, and partner with teams across AWS to move access to lower-risk patterns or remove it.

You will mentor engineers, drive remediation, and build measurement and detection capabilities to show where risky access exists and whether it is trending down.