Senior Security Engineer, AWS Vulnerability Management, AWS Vulnerability Management - Host OS and Third Party Software

Do you want to build security solutions in third party software and software supply chain that have not been built anywhere at this scale?

Amazon is hiring for our Third Party Software and Software Supply Chain Vulnerability Management team. You will put your offensive security background to work — penetration testing, exploit development, or threat intelligence — to find the attack paths an adversary would take through our vendors and package registries, and to decide which risks we close first.

This is a role where the hardest problems are not yet defined, and defining them is the job. You will own outcomes, not tickets. You will set the security bar for the top CI/CD toolchains at Amazon, drive mitigation of supply chain incidents at machine speed, and build the defense against a SolarWinds-class vendor compromise before it happens. You will set the security requirements and hand validated designs to software development engineers to build at scale, so your judgment sets the direction for a team.

You will also help build our offensive security capability from the ground up and mentor the security engineers around you. If you want to own hard, ambiguous security problems with Amazon-wide impact and grow the team that solves them, this role is for you.

Key job responsibilities

…