Security Engineer, Infrastructure Application Security

AWS Security protects the cloud computing environment that millions of customers rely on every day. Our infrastructure security team works directly with the engineers who design, build, and operate AWS data center and infrastructure services, helping them ship securely from the start.

We're looking for a Security Engineer to join our team and provide hands-on security engineering support to infrastructure builders across AWS. You will review architectures, identify security risks, guide teams toward secure designs, and help build tooling that scales security across a broad portfolio of services. You'll work across a range of technologies: networking, hardware lifecycle systems, procurement systems, data center automation, and cloud infrastructure services.

This is a role where you'll grow fast. You will work alongside experienced security engineers who will help you develop depth in threat modeling, secure design review, and security automation. You'll gain exposure to systems operating at massive scale, and you'll build the judgment to prioritize what matters most when everything looks urgent.

We're looking for someone who communicates clearly, asks good questions, digs into problems with persistence, and brings genuine curiosity about how systems fail.

Key job responsibilities
As a Security Engineer supporting infrastructure teams, you will:
- Conduct security design reviews and threat modeling for infrastructure services, identifying risks and providing clear remediation guidance to partner teams
- Perform manual and automated secure code review across infrastructure codebases
- Provide security architecture and design guidance to builders at the ideation and implementation stages
- Develop and maintain security automation tools that scale review processes across the infrastructure portfolio
- Document findings, track remediation progress, and verify fixes with partner teams
- Deliver security training and outreach to internal infrastructure development teams
- Identify and escalate high-severity security issues through appropriate channels, aligned to launch timelines

A day in the life
You'll collaborate with infrastructure engineering teams to help them build secure services from the start. On any given day, you might be threat modeling a new architecture, reviewing code for security issues, building automation to scale security practices, or guiding a partner team through a secure design decision. Senior engineers on your team will help you develop depth in application security and sharpen your ability to communicate risk clearly. Over time, you'll own relationships with partner teams and become their trusted security resource.

About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

- Bachelor's degree in Engineering, Computer Science, or a related field
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience with web protocols, common security attacks, and remediation (non-internship)
- Experience solving basic problems by writing code or scripts with some assistance
- Experience applying threat modeling or other risk identification techniques or equivalent

- Experience with AWS services or other cloud offerings
- Experience in one or more of the following: application security frameworks, security code reviews, incident response, security infrastructure, penetration testing, mobile security, cloud security, AI security, identity and access controls
- Experience scripting with Python, Perl, Bash or PowerShell
- Knowledge of networking protocols such as HTTP, DNS and TCP/IP

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.