Security Engineer II

As a Security Engineer II on Amazon HealthSec's AI team, you will help secure GenAI applications and enable secure AI adoption across Amazon Health Services. This on-site role in Arlington, VA centers on building scalable AI powered security tooling and ensuring HIPAA compliant AI systems within the AI for Security and Security for AI domains. The annual compensation ranges from USD 159,300 to 202,400.

Responsibilities

• Lead the design and rollout of proactive security controls for Amazon Health Services AI apps, including GenAI chatbots, agent-based systems, and LLM powered tools
• Create and enforce security controls across the AI-SDLC to ensure secure AI applications by default
• Evaluate AI specific security risks such as prompt injection, model abuse, data exfiltration, and unauthorized tool invocation, and guide mitigations at scale
• Develop and promote AI powered security tooling such as automated threat modeling, code scanning, and security test generation to scale security across AHS
• Advance AI security guardrails, testing frameworks, and monitoring for GenAI applications across AHS
• Collaborate with AHS builder teams to embed security guidance into AI development workflows, reducing late-stage security findings
• Create and maintain security documentation including AI threat models, risk assessments, and secure AI development guidelines
• Support security incident investigations related to AI systems, including prompt injection attacks and model misuse

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .NET or C++ or a similar object-oriented language
• Bachelor's degree in a STEM field, or equivalent experience in IT security
• Experience with AI/ML technologies
• Experience applying threat modeling or other risk identification techniques
• Knowledge of common AI security risks such as prompt injection, data poisoning, model extraction, and insecure tool use

Technologies

• Python
• Ruby
• Go
• Swift
• Java
• .NET
• C++
• AWS

Benefits

• Health insurance including medical, dental, vision, prescription coverage, Basic Life and AD&D insurance with options for supplemental life plans, EAP, mental health support, Medical Advice Line, Flexible Spending Accounts, and adoption or surrogacy reimbursement
• 401(k) matching
• Paid time off
• Parental leave
• Sign-on payments
• Restricted stock units (RSUs)

About the Team

The HealthSec AI team secures Amazon's healthcare AI applications and builds AI powered security tooling to scale protection across AHS. We operate in two domains: Security for AI, securing GenAI applications and the AI-SDLC, and AI for Security, building AI tools that automate security guidance, testing, and workflows. Amazon Security offers security professionals the chance to grow across cloud, devices, retail, entertainment, healthcare, and operations.

Diverse Experiences

Amazon Security values diverse experiences. If you do not meet every listed qualification, we encourage you to apply. Whether your career is just starting, follows a nontraditional path, or includes alternative experiences, your background may bring valuable perspectives to the team.

Why Amazon Security?

Security is central to maintaining customer trust and delivering exceptional experiences at Amazon. The Security organization maintains a high standard across all products and services and offers opportunities to broaden expertise across cloud, devices, retail, entertainment, healthcare, operations, and more.

Inclusive Team Culture

Learning and curiosity come first in Amazon Security. Ongoing DEI events and development opportunities help us grow while embracing diverse ideas, perspectives, and voices.

Training & Career Growth

We continually raise the performance bar as we strive to be Earth’s Best Employer. You will have access to knowledge-sharing, training, and resources that support professional development.

Work/Life Balance

Flexibility is valued, with adaptable work hours and arrangements designed to support a healthy balance between work and home life.