Security Engineer, Infrastructure Application...

Amazon.com, Inc.
Herndon, United States of America
5 days ago

Role details

Contract type
Internship / Graduate position
Employment type
Full-time (> 32 hours)
Working hours
Regular working hours
Languages
English

Job location

Herndon, United States of America

Tech stack

Amazon Web Services (AWS)
Software System Penetration Testing
Bash
Cloud Computing Security
Code Review
Computer Security
Data Centers
Perl
Python
Powershell
Secure Coding
Mobile Security
Scripting (Bash/Python/Go/Ruby)
Cloud Platform System
Software Security
Information Technology
Software Coding
Security Orchestration, Automation & Response

Job description

We're looking for a Security Engineer to join our team and provide hands-on security engineering support to infrastructure builders across AWS. You will review architectures, identify security risks, guide teams toward secure designs, and help build tooling that scales security across a broad portfolio of services. You'll work across a range of technologies: networking, hardware lifecycle systems, procurement systems, data center automation, and cloud infrastructure services.

This is a role where you'll grow fast. You will work alongside experienced security engineers who will help you develop depth in threat modeling, secure design review, and security automation. You'll gain exposure to systems operating at massive scale, and you'll build the judgment to prioritize what matters most when everything looks urgent.

We're looking for someone who communicates clearly, asks good questions, digs into problems with persistence, and brings genuine curiosity about how systems fail., As a Security Engineer supporting infrastructure teams, you will:

  • Conduct security design reviews and threat modeling for infrastructure services, identifying risks and providing clear remediation guidance to partner teams

  • Perform manual and automated secure code review across infrastructure codebases

  • Provide security architecture and design guidance to builders at the ideation and implementation stages

  • Develop and maintain security automation tools that scale review processes across the infrastructure portfolio

  • Document findings, track remediation progress, and verify fixes with partner teams

  • Deliver security training and outreach to internal infrastructure development teams

  • Identify and escalate high-severity security issues through appropriate channels, aligned to launch timelines

A day in the life

You'll collaborate with infrastructure engineering teams to help them build secure services from the start. On any given day, you might be threat modeling a new architecture, reviewing code for security issues, building automation to scale security practices, or guiding a partner team through a secure design decision. Senior engineers on your team will help you develop depth in application security and sharpen your ability to communicate risk clearly. Over time, you'll own relationships with partner teams and become their trusted security resource., At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Requirements

Bachelor's degree in Engineering, Computer Science, or a related field

  • Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent

  • Experience with web protocols, common security attacks, and remediation (non-internship)

  • Experience solving basic problems by writing code or scripts with some assistance

  • Experience applying threat modeling or other risk identification techniques or equivalent

Preferred Qualifications

  • Experience with AWS services or other cloud offerings

  • Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls

  • Experience scripting with Python, Perl, Bash or PowerShell

Benefits & conditions

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.

About the company

AWS Security protects the cloud computing environment that millions of customers rely on every day. Our infrastructure security team works directly with the engineers who design, build, and operate AWS data center and infrastructure services, helping them ship securely from the start.

Apply for this position