Security Engineer • Mid-Level

Who you are

You have a strong background in security engineering, with experience in creating and maintaining threat models for web applications hosted on the cloud. Your expertise includes manual and automated secure code reviews, primarily in Java, Python, and JavaScript, allowing you to identify vulnerabilities effectively.

You are skilled in developing security automation tools and conducting adversarial security analysis using the latest tools to enhance manual efforts. Your ability to provide security training and outreach for internal development teams demonstrates your commitment to fostering a security-first culture.

You possess excellent communication skills, enabling you to provide security architecture and design guidance to application development teams. You are adept at solving systemic, complex security problems that require innovative methods or approaches, and you can influence your team’s and partners’ processes and strategies using data to improve security outcomes.

What you'll do

In this role, you will be responsible for creating, updating, and maintaining threat models for a variety of web applications. You will conduct both manual and automated secure code reviews, ensuring that applications are built with security in mind. Your work will involve developing security automation tools that streamline security processes and enhance overall security posture.

You will perform adversarial security analysis, utilizing the latest tools to augment your manual efforts and provide comprehensive security assessments. Additionally, you will offer security training and outreach to internal development teams, helping them understand best practices and the importance of security in their workflows.

Your role will also include providing security architecture and design guidance to application development teams, ensuring that security is integrated into the development lifecycle. You will independently tackle complex security challenges, employing novel methods to address systemic issues. Your influence will extend to senior leaders and stakeholders, as you provide technical and strategic guidance through effective communication.

What we offer

At Amazon, we value work-life harmony and provide opportunities for our engineers to pursue projects they are passionate about. You will be part of a team that is dedicated to protecting Amazon's corporate services, systems, and data, contributing to a secure environment for innovation and growth. We offer competitive compensation and a comprehensive benefits package, including health insurance, retirement plans, and paid time off.