Security Engineer III, AWS Proactive Security Team

Are you passionate about protecting systems and customers at massive scale? As a Security Engineer III at Amazon, you will lead security risk reduction efforts across teams, tackling complex and ambiguous security challenges that directly safeguard the services millions of customers depend on. In this role, you will design and validate security controls, conduct in-depth security reviews, and build pragmatic solutions that generalize across systems — reducing cost and effort for engineering teams while raising the security bar. You will work at the intersection of technology strategy and risk management, balancing competing constraints to deliver outcomes that are extensible, efficient, and low-friction for builders. If you are a collaborative problem solver who thrives on turning undefined security challenges into repeatable frameworks, we want to hear from you.

Key job responsibilities

• Lead complex security reviews, threat modeling exercises, and security investigations across your team and partner teams, identifying risks and driving pragmatic mitigation strategies that reduce overall security exposure.
• Design and build security frameworks, runbooks, and rubrics for new problem domains, enabling other engineers to apply your work in a repeatable and scalable way across the organization.
• Engage proactively with product and system owners to review architectures, validate security controls, and guide teams through secure design decisions — including reviewing or writing code, scripts, and detections.
• Communicate security risk and design decisions clearly in writing for both technical and non-technical audiences, and lead inclusive discussions to build consensus when navigating conflicting priorities or trade-offs.
• Mentor and coach multiple security engineers, contribute to hiring assessments, and help establish mature security practices including alarms, telemetry, runbooks, and retrospective processes for your team.

…