Amazon Security Engineer AWS Vulnerability Management AVM 

United States, Washington, Seattle 

800897134

As a Security Engineer, you will interpret and triage vulnerability disclosures, collaborate with AWS experts on technical solutions, and drive remediation activities across AWS’s vast scale. Your role will involve reviewing and assessing patching requests, diving deep into potential risks, and leveraging your vulnerability management expertise. You'll work closely with service team engineers to understand architectural mitigations and compensating controls, and you'll partner with senior security engineers to review and approve requests.Your impact will be critical in helping AWS maintain top-tier security by balancing risk and service delivery. You'll focus on identifying security trends, enhancing security visibility, and recommending improvements to our security posture.Key job responsibilities
- Establishing a risk-based approach to vulnerabilities
- Standardizing workflows to streamline remediation efforts
- Providing guidance on compensating controls- Authoring risk assessment statements, remediation guidance, audit responses, and status reports- Developing tooling to automate and refine vulnerability management processes
- Identifying and owning projects that continuously improve proactive security across AWS
- Periodic on-call responsibilitiesA day in the life
About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.Work/Life Balance

- Are enrolled in or have completed a Bachelor's degree in computer science, computer engineering, or related field
- Knowledge of system, network and OS
- Knowledge of internet fundamentals and cloud computing concepts
- Experience with at least one modern language such as Java, Python, C++, or C# including object-oriented design