Security Engineer I, AppSTAR

Are you passionate about protecting systems and data at massive scale? Amazon is looking for a Security Engineer I to help safeguard the infrastructure, services, and products that millions of customers rely on every day. In this role, you will work alongside experienced security professionals to identify and reduce security risks, contribute to secure development practices, and strengthen our overall security posture. You will gain hands-on experience with threat modeling, security code reviews, penetration testing, and scripting to automate security workflows. If you are curious, persistent, and eager to grow your career in security engineering, this is the place to start building something meaningful.

Key job responsibilities
- Collaborate with engineering teams to perform threat modeling and security assessments, identifying vulnerabilities and recommending prioritized remediation strategies across services and applications.
- Conduct security code reviews to evaluate source code for weaknesses, validate input handling, and assess authentication mechanisms, ensuring alignment with secure coding practices.
- Contribute to the development and maintenance of security runbooks, tools, and automation scripts that improve operational efficiency and reduce manual effort across the team.
- Partner with cross-functional teams to embed security into the software development lifecycle, including secure design reviews, testing, and deployment of security controls.
- Investigate potential security issues, drive root cause analysis, and work with stakeholders to implement corrective actions that protect both company and customer resources.

A day in the life
You will start your morning reviewing security findings and triaging alerts alongside your teammates. From there, you might dive into a code review for a partner team's new feature, looking for common vulnerability patterns and providing actionable feedback. After a design review session, you could spend the afternoon writing scripts to automate a recurring security check or updating a runbook to reflect a recently improved process. Regular check-ins with your team keep you connected and supported as you tackle new challenges.

About the team
Our team is focused on reducing security risk and building trust with customers through proactive security practices. We work closely with engineering teams across Amazon to ensure that security is integrated from the ground up, not bolted on as an afterthought. We value collaboration, continuous learning, and creative problem-solving. Whether you are refining an existing process or exploring a new approach to a security challenge, you will find a supportive environment where your growth and contributions matter.