Software Dev Engineer II: Fleet Vulnerability Mitigation

Amazon Inc.; Arlington (VA); On-site; USD 130,000 - 170,000; Full time

Job summary

Amazon Web Services (AWS) Security is our top priority, and AVM leads end-to-end vulnerability lifecycle management across AWS. PitCrew designs, builds, and operates automation to mitigate, remediate, and verify vulnerabilities at fleet scale.

You will own features end to end, collaborating with security engineers, reviewing designs, deploying changes, and operating what you ship. The role blends distributed systems, host/container internals, and security at scale.

Responsibilities

• Design, implement, and operate services and automation that mitigate, remediate, and assess vulnerabilities across AWS fleets, reducing the attack surface and mean time to remediate without a human in the loop.
• Build the contextualization that turns raw findings into accurate, prioritized risk for builders, so service teams act on true criticals first.
• Own the full lifecycle of your software: requirements, design reviews, implementation, testing, deployment, metrics, alarms, and on-call.
• Build tooling that security engineers use daily, and work closely with them to turn investigation, remediation, assessment, and attestation workflows into software.
• Make changes to production hosts and containers safe by default: reversible, observable, attested, and gated appropriately.
• Raise the bar on operational excellence through metrics, dashboards, and continuous improvement of the systems you own.
• Mentor other engineers and contribute to the team's technical direction through design reviews and documentation.

Job description

Amazon Web Services (AWS) Security is our top priority, and AVM leads end-to-end vulnerability lifecycle management across AWS. PitCrew designs, builds, and operates automation to mitigate, remediate, and verify vulnerabilities at fleet scale.

You will own features end to end, collaborating with security engineers, reviewing designs, deploying changes, and operating what you ship. The role blends distributed systems, host/container internals, and security at scale.