AWS Security protects the cloud computing environment that millions of customers rely on every day. Our infrastructure security team works directly with the engineers who design, build, and operate AWS data center and infrastructure services, helping them ship securely from the start.
We're looking for a Security Engineer to join our team and provide hands-on security engineering support to infrastructure builders across AWS. You will review architectures, identify security risks, guide teams toward secure designs, and help build tooling that scales security across a broad portfolio of services. You'll work across a range of technologies: networking, hardware lifecycle systems, procurement systems, data center automation, and cloud infrastructure services.
This is a role where you'll grow fast. You will work alongside experienced security engineers who will help you develop depth in threat modeling, secure design review, and security automation. You'll gain exposure to systems operating at massive scale, and you'll build the judgment to prioritize what matters most when everything looks urgent.
We're looking for someone who communicates clearly, asks good questions, digs into problems with persistence, and brings genuine curiosity about how systems fail.
Key job responsibilities
As a Security Engineer supporting infrastructure teams, you will:
- Conduct security design reviews and threat modeling for infrastructure services, identifying risks and providing clear remediation guidance to partner teams
- Perform manual and automated secure code review across infrastructure codebases
- Provide security architecture and design guidance to builders at the ideation and implementation stages
- Develop and maintain security automation tools that scale review processes across the infrastructure portfolio
- Document findings, track remediation progress, and verify fixes with partner teams
- Deliver security training and outreach to internal infrastructure development teams
- Identify and escalate high-severity security issues through appropriate channels, aligned to launch timelines
A day in the life
You'll collaborate with infrastructure engineering teams to help them build secure services from the start. On any given day, you might be threat modeling a new architecture, reviewing code for security issues, building automation to scale security practices, or guiding a partner team through a secure design decision. Senior engineers on your team will help you develop depth in application security and sharpen your ability to communicate risk clearly. Over time, you'll own relationships with partner teams and become their trusted security resource.
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.
BASIC QUALIFICATIONS
- Bachelor's degree in Engineering, Computer Science, or a related field
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience with web protocols, common security attacks, and remediation (non-internship)
- Experience solving basic problems by writing code or scripts with some assistance
- Experience applying threat modeling or other risk identification techniques or equivalent
PREFERRED QUALIFICATIONS
- Experience with AWS services or other cloud offerings
- Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls
- Experience scripting with Python, Perl, Bash or PowerShell
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP
