Senior Security Engineer, Third-Party & Supply-Chain

Amazon Web Services (AWS); Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Job summary

Amazon.com Services LLC in Seattle is seeking a security leader to own hard, ambiguous security problems across third-party software and supply chains. You will define and enforce security bars for our curated package registry and CI/CD toolchains, guiding designs to engineers at scale.

You will apply offensive security, threat intelligence, and penetration testing to block attack paths, improve rapid-response capabilities, and mentor security engineers while working with AWS teams to protect

Qualifications

• 5+ years identifying security issues and mitigating risks.
• 4+ years troubleshooting systems, analyzing logs, or automating tasks using command line tools.
• 4+ years scripting and security code review in common languages.
• Experience identifying vulnerabilities, attack patterns, and remediation techniques.
• Knowledge of two or more languages: Scala, Java, Python, C/C++, or Go.
• Experience as a mentor, tech lead or leading an engineering team.

Responsibilities

• Hunt for attack paths through third-party software and supply chain components using testing and threat intelligence.
• Define and enforce security bar for package registry and CI/CD toolchains; hand designs to engineers.
• Build and test automation to detect and block supply chain incidents.
• Raise security bar across code repositories via architecture and code reviews.
• Mentor engineers and communicate risk assessments to peers and leadership.

Skills

Security analysis

Log analysis

Scripting

Code review

Mentorship

Java

Python

C/C++

Job description

Amazon.com Services LLC in Seattle is seeking a security leader to own hard, ambiguous security problems across third-party software and supply chains. You will define and enforce security bars for our curated package registry and CI/CD toolchains, guiding designs to engineers at scale.

You will apply offensive security, threat intelligence, and penetration testing to block attack paths, improve rapid-response capabilities, and mentor security engineers while working with AWS teams to protect