← All roles

Senior Security Engineer, AWS Vulnerability Management, AWS Vulnerability Management - Host OS and Third Party Software

Amazon· Systems, Quality, & Security Engineering
Apply on company site
Hybrid (Austin, TX), Hybrid (Arlington, VA), Hybrid (Seattle, WA)$178.4k - $226.7kFull-timePosted yesterday

About the role

Senior Security Engineer focusing on Third Party Software and Software Supply Chain Vulnerability Management. Lead offensive security activities, define security bar for curated package registry and CI/CD toolchains, and drive rapid mitigation of supply chain incidents at scale.

Responsibilities

  • Hunt for attack paths through Amazon's third party software packages and supply chain components using penetration testing and threat intelligence to determine remediation priorities.
  • Define and enforce the security bar for Amazon's curated package registry and top CI/CD toolchains; close riskiest bypass paths and hand validated designs to software engineers for implementation.
  • Build and test detection-to-block automation to mitigate supply chain incidents within minutes; lead rapid response for zero-day vulnerabilities in internet-facing third party appliances.
  • Raise the security bar across code repositories through architecture review, code review, and reusable frameworks that engineering teams can adopt with minimal effort.
  • Mentor security engineers and shape a culture of fast, pragmatic solutions while communicating risk assessments and design decisions to technical peers and senior leadership.

Qualifications

  • 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
  • 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
  • 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
  • Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
  • Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
  • Experience as a mentor, tech lead or leading an engineering team

Skills

Required:Penetration testingThreat intelligenceSecurity design & architectureCode reviewLeadership & mentoringScripting/programming
Nice to have:Incident response

Benefits

  • base salary with sign-on payments and RSUs
  • comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
  • 401(k) matching
  • paid time off
  • parental leave
Last updated Oct 25, 2026. Interested? Apply on the company site.

About Amazon

Amazon.com, Inc. or its affiliates

liquid-ai-recruiting-target
Company profileWebsite

More open roles at Amazon