Security Engineer, Security for Employee and Legal Systems (SEALS)

The Security for Employee and Legal Systems (SEALS) team protects Amazon's enterprise HR and Legal applications. Millions of Amazonians use these systems to review their pay, manage their benefits, update their personal information, and handle confidential legal matters. Protecting that data is the core of what SEALS does, and the customers who depend on us are the people who work here. The applications we protect are increasingly built with GenAI, and many of them now embed GenAI features and agentic workflows of their own. That shifts the security work. You will threat model LLM-backed applications, assess risks such as prompt injection, insecure model output handling, and over-broad agent permissions, and secure transitive authentication as agents act on behalf of users. You will also use GenAI to scale your own delivery, from automated code review to detection authoring. SEALS delivers ambient security. Builders get security feedback while they write code, at commit time, so risks are caught and fixed during development. As a Security Engineer on SEALS, you will be an embedded partner to your builder teams and own the security outcomes for your domain. Strong candidates bring depth in application security: threat modeling, architecture and design reviews, secure code review, and hands-on remediation. You will contribute autonomously within the team, deliver risk reduction across the full lifecycle, and mentor peers, while seeking guidance from managers and technical leaders on the hardest tradeoffs.

…