2 months ago
Base Salary
$159k - $202k/yr
Responsibilities
- Own security outcomes for assigned builder teams and the HR and Legal applications they operate.
- Threat model GenAI and LLM-backed applications, including prompt injection, insecure output handling, data leakage through model context, and excessive agent authority.
- Secure agentic workflows through transitive authentication and scoped authorization.
- Author and refine automated detection rules that identify risks at code commit and provide actionable fixes.
- Use GenAI for AI-assisted code review, detection authoring, and triage.
- Drive adoption of Secure CDK Blueprints, automated patching, standardized authorization, and transitive authentication for agentic workflows.
- Perform adversarial analysis and manual secure code review in Java, Python, and JavaScript, then turn identified gaps into new detections.
- Provide security architecture guidance and lead security outcomes for design reviews.
- Prioritize remediation by business impact and escalate launch-blocking risk decisions when needed.
- Communicate security outcomes to security and service team leadership and mentor other engineers.
Requirements
- 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language.
- 2+ years of non-internship scripting, programming, and security code review experience in a common programming language.
- 2+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating basic tasks with command-line tools.
- Bachelor’s degree in computer science or equivalent, or qualifying IT Security experience as specified in the posting.
- Knowledge of networking protocols including HTTP, DNS, and TCP/IP.
- Knowledge of industry security vulnerabilities and remediation techniques.
- Preferred: 2+ years in combinations of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
- Preferred: experience with AWS products and services.
- Preferred: experience performing security activities across software development lifecycle phases such as security design review, threat modeling, secure code review, and security testing.
Benefits
- Comprehensive health insurance, including medical, dental, vision, prescription, Basic Life and AD&D insurance, and optional supplemental life plans.
- Employee Assistance Program, mental health support, medical advice line, flexible spending accounts, and adoption and surrogacy reimbursement coverage.
- 401(k) matching, paid time off, and parental leave.
- Additional package components include sign-on payments and restricted stock units; the position is based in Seattle, Washington.
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.