The Content Security team protects pre-release content across Amazon Global Media and Entertainment. This Content Security Engineer role combines hands-on production security advisory with technical execution: securing content creation workflows, researching and developing next-generation protection measures, and maintaining the cloud infrastructure and tooling that power our security mechanisms. You will work directly with studio and production teams across the content creation lifecycle (pre-production, production, post-production, and delivery) while also driving forward-looking initiatives to address emerging threats, including those introduced by generative AI. You will also review the tools and services internal teams build to handle pre-release content, making sure content security measures are built in from the start. This requires a deep understanding of each tool's use cases and workflow context so that controls are right-sized to the actual risk. You will use AI and automation to scale and mechanize content security operations.
Key job responsibilities
Serve as the primary content security advisor to film and series production teams, providing tailored guidance on secure workflow design: editorial environment setup, Aspera file transfer configurations, cloud storage architecture, on-set networking, and remote collaboration tools
Assess internal and external content processing architectures (large enterprise to boutique post houses) to securely deploy and maintain content networks and equipment
Manage security assessments of 3rd party services and tools supporting Amazon Studios, including intake of production team requests and end-to-end vendor security coordination
Research, evaluate, and pilot next-generation content security measures such as forensic watermarking, audio/video fingerprinting, and content tracking technologies
Contribute to the team's strategy for securing pre-release content against generative AI threats, including AI-driven extraction, reconstruction, deepfake misuse, and model training on unreleased assets; translate emerging risks into actionable controls and standards
Maintain and enhance AWS infrastructure and applications supporting Content Security operations, and build internal security tooling to automate workflows such as access governance, audit reporting, and compliance monitoring
Write and maintain lightweight automation (Python/scripting) to support security tooling, audit workflows, and operational reporting
Develop and iterate security standard operating procedures tailored to each studio and production team
Mentor junior team members and contribute to the team's hiring process
Provide regular written updates on program status, risk posture, and incident findings
BASIC QUALIFICATIONS
- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
- 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
- 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP
- Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
- Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)
PREFERRED QUALIFICATIONS
- 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience
- Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
- Experience with AWS products and services
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, CA, Culver City - 159,300.00 - 202,400.00 USD annually