1 day ago
Arlington, VA, USAMid Level
H1B sponsor
Base Salary
$159k - $202k/yr
Responsibilities
- Own security outcomes for assigned builder teams and the HR and Legal applications they operate.
- Threat model GenAI and LLM-backed applications, including prompt injection, insecure output handling, data leakage, and excessive agent authority.
- Secure agentic workflows through transitive authentication and scoped authorization.
- Author and refine automated detection rules that identify risks at code commit.
- Use GenAI for AI-assisted code review, detection authoring, and triage.
- Drive adoption of Secure CDK Blueprints, automated patching, standardized authorization, and transitive authentication.
- Perform adversarial analysis and manual secure code review in Java, Python, and JavaScript.
- Provide security architecture guidance and lead security outcomes for design reviews.
- Prioritize remediation by business impact and escalate launch-blocking risks when necessary.
- Coach peers through reviews, training, and outreach while driving cross-functional risk reduction.
- Communicate security outcomes clearly to security and service-team leadership.
Requirements
- 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language.
- 2+ years of non-internship scripting, programming, and security code review experience in a common programming language.
- 2+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating basic tasks with command-line tools.
- Bachelor’s degree in computer science or equivalent, or a bachelor’s degree in a STEM field; qualifying IT Security experience may substitute in stated cases.
- Knowledge of HTTP, DNS, and TCP/IP networking protocols.
- Knowledge of industry security vulnerabilities and remediation techniques.
- Preferred experience includes threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
- Preferred experience with AWS products and services and programming languages such as Python, Java, and C++.
- Preferred experience performing security activities across software development lifecycle phases including security design review, threat modeling, secure code review, and security testing.
Benefits
- Comprehensive health coverage including medical, dental, vision, prescription, life and AD&D insurance, an employee assistance program, mental health support, and a medical advice line.
- Flexible Spending Accounts and adoption and surrogacy reimbursement coverage.
- 401(k) matching, paid time off, and parental leave.
- The package may include sign-on payments and restricted stock units.
- Full-time position based in Arlington, Virginia, USA.
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.