Security Engineer I, AWS Proactive Security Team

Are you passionate about protecting systems and data at massive scale? As a Security Engineer I at Amazon, you will help safeguard the applications and infrastructure that millions of customers rely on every day. In this role, you will work alongside experienced security engineers to identify and reduce security risks, conduct threat analysis, and contribute to building secure solutions. You will gain hands-on experience across security domains while making a meaningful impact on customer trust and the overall security posture of the services you support.

Key job responsibilities

• Analyze software and services to identify security requirements, model threats, and pinpoint potential vulnerabilities across your team's scope of responsibility.
• Conduct security code reviews to evaluate source code for vulnerabilities, weaknesses in implementation, and deviations from secure coding practices, recommending specific remediation strategies.
• Contribute to runbooks, automation scripts, and security tooling that improve your team's ability to detect and respond to security issues at scale.
• Collaborate with development teams and peers to embed security into the software development lifecycle, from design through testing and deployment.
• Communicate security risks clearly in written and verbal form to your team, partner teams, and direct leadership, driving actionable outcomes.

A day in the life Your morning might start by reviewing the results of a recent security assessment and triaging findings with your team. After standup, you could spend time performing a code review for a partner team's new service, flagging areas where input handling needs strengthening. In the afternoon, you might update a runbook based on lessons learned from a recent incident, or write a script to automate a repetitive security check. You will regularly connect with development engineers and more senior security engineers to discuss design decisions and learn new approaches.

…