1 day ago
Base Salary
$178k - $227k/yr
Responsibilities
- Partner with platform software teams to secure CI/CD pipelines, conduct security code reviews, and remediate vulnerabilities.
- Define application-security acceptance criteria, scanning gates, and image-signing policies for the AI platform.
- Own software supply-chain assurance standards covering artifact provenance, dependency validation, and image signing.
- Ensure the platform build implements and validates required security controls.
- Collaborate with software engineers, ISSOs, and security testers throughout the development lifecycle.
- Communicate security risks and design decisions to technical and non-technical audiences.
- Mentor security engineers through design reviews and career guidance.
Requirements
- Bachelor's degree in Computer Science or a related field.
- 6+ years of experience in application security architecture, secure software engineering, security code reviews, security testing, or security infrastructure.
- Experience with SAST/DAST, container or image scanning, and software supply-chain assurance.
- Current, active U.S. Government TS/SCI security clearance with polygraph.
- U.S. citizenship is required.
- Preferred experience securing CI/CD in classified or disconnected environments and familiarity with supply-chain security frameworks.
- Preferred security certification such as CSSLP or OSCP.
Benefits
- Comprehensive health insurance, including medical, dental, vision, prescription, life, AD&D, employee assistance, mental health support, medical advice, flexible spending, and adoption and surrogacy reimbursement coverage.
- 401(k) matching, paid time off, parental leave, sign-on payments, and restricted stock units.
- Flexible work hours and arrangements, ongoing training, knowledge-sharing, and career-development resources.
- Locations include Jessup, Maryland, and Herndon, Virginia; the base salary range varies by location.
Categories
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.