1 day ago
Irvine, CA, USAMid Level
H1B sponsor
Base Salary
$159k - $202k/yr
Responsibilities
- Lead a strategic security initiative end to end, including scoping, design, implementation, testing, deployment, and maintenance.
- Build scalable security automation, AI-powered tooling, prevention rules, secure defaults, and paved paths that prevent vulnerabilities before production.
- Review application architectures and designs, lead security design reviews, and guide builders toward secure-by-default solutions.
- Provide builder-facing security consulting, including intake, triage, actionable guidance, and resolution tracking.
- Identify opportunities to centralize and reuse security controls across teams and address root causes with maintainable mechanisms.
- Investigate ambiguous, high-impact risks, help contain urgent security issues, and ensure lasting remediation.
- Communicate security risks and recommendations to engineers, security partners, and business stakeholders.
- Coach and mentor teammates and help guide other engineers.
Requirements
- At least 2 years of non-internship experience with scripting, programming, and security code review in a common programming language.
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and exploit development or equivalent experience.
- Experience owning and leading significant projects from concept through deployment.
- Experience communicating security risks to technical and non-technical stakeholders in writing.
- At least 3 years of application security engineering experience, including security design reviews, threat modeling, and code-level vulnerability analysis.
- Experience managing a builder-facing security consulting workload involving intake, triage, guidance, and resolution tracking.
- Preferred: logistics or operations environment experience.
- Preferred: root cause analysis and error correction experience focused on long-term procedural and system fixes.
- Preferred: experience mentoring, leading, or managing more junior engineers.
- Preferred: AWS cloud security experience with services such as IAM, VPC, KMS, and CloudTrail, or equivalent services.
- Preferred: experience building automated security controls or shifting security left in CI/CD pipelines.
Benefits
- Comprehensive health insurance, including medical, dental, vision, prescription, Basic Life and AD&D insurance, supplemental life plan options, an Employee Assistance Program, mental health support, a medical advice line, and flexible spending accounts.
- 401(k) matching, paid time off, parental leave, and adoption and surrogacy reimbursement coverage.
- Sign-on payments and restricted stock units are included in the Amazon package.
- Flexible work hours and arrangements supporting work-life harmony.
- Ongoing knowledge-sharing, training, DEI learning experiences, and career-advancing resources.
- Work location: Irvine, California, USA.
About Amazon
Amazon builds and operates a global e-commerce marketplace, logistics network, and consumer devices, and provides cloud computing via AWS for businesses and developers. The company earns revenue from online retail, third‑party seller services, subscriptions like Prime, advertising, and AWS usage. Founded in 1994 and headquartered in Seattle, it is publicly traded on NASDAQ (AMZN) and serves customers in dozens of countries.