Security Engineer, Infrastructure Application Security
Job Description
Join Amazon's security engineering team in Herndon, Virginia, onsite, where the focus is safeguarding the infrastructure that powers AWS data centers. This hands-on Security Engineer role supports infrastructure builders by conducting threat modeling and design reviews, while also building security automation that scales across AWS data center and infrastructure services. The position offers a salary range of USD 136,000 to 184,000 per year.
Responsibilities
- Carry out security design reviews and threat modeling for infrastructure services, identify risks, and provide actionable remediation guidance to partner teams.
- Execute manual and automated secure code reviews across infrastructure codebases.
- Offer security architecture and design guidance to builders from concept through implementation.
- Create and maintain security automation tools to scale review processes across the infrastructure portfolio.
- Document findings, track remediation progress, and verify fixes in collaboration with partner teams.
- Provide security training and outreach to internal infrastructure development teams.
- Identify high-severity security issues and escalate them through appropriate channels in line with launch timelines.
Requirements
- Bachelor's degree in Engineering, Computer Science, or a related field.
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploit development, or equivalent experience.
- Direct, non-internship experience with web protocols, common security attacks, and remediation.
- Experience solving straightforward problems by writing code or scripts, with some guidance.
- Experience applying threat modeling or other risk identification techniques, or equivalent.
Technologies
- Python
- Perl
- Bash
- PowerShell
- AWS
Benefits
- Health insurance (medical, dental, vision, prescription)
- 401(k) matching
- Paid time off
- Parental leave
- Basic Life & AD&D insurance and option for Supplemental life plans
- Employee Assistance Program (EAP)
- Mental Health Support
- Flexible Spending Accounts
- Adoption and Surrogacy Reimbursement coverage
- Sign-on payments
- Restricted Stock Units (RSUs)