AmazonSecurity Engineer I, Secure Third Party Tools (S3T)
Amazon is hiring a Security Engineer I, Secure Third Party Tools (S3T) in Arlington, United States. It pays $136k-$184k a year and Level rates it ; you can apply on Amazon.
Level's read on this job
- Level rates this cybersecurity role Uses AI ●●○○: an ordinary role that requires AI tools.
- The posting mentions Python, Git and security engineering among its tools and skills.
- Level classes it as a junior role.
- Amazon has 21,000+ other open roles on Level.
- Posted within the past week.
AI in this role
Security engineer evaluating third-party AI/ML integrations and building automated security tooling for risk management.
Key job responsibilities
- Perform technical security reviews of third-party services — including AI/ML integrations, cloud architectures, and services handling sensitive customer data — identifying gaps in security controls and recommending mitigations.
- Trace data flows through complex systems, threat model third-party use cases, and evaluate vendor penetration test reports to surface risks and drive proportionate remediation decisions.
- Contribute to AI-powered security tooling and automation that scales review decisions across the organization, scripting solutions and improving existing runbooks.
- Communicate identified risks and recommendations in written and verbal form to service teams and leadership, escalating where appropriate to drive resolution.
- Author and refine security decision rubrics and implementation patterns so that future engineers can build upon your findings.
A day in the life
You start by picking up a new third-party engagement, reviewing the architecture diagrams and data-flow documentation the service team has provided. You apply threat modeling to identify where sensitive data crosses trust boundaries, then draft your findings and discuss them with a senior engineer during a checkpoint. After lunch you might write a script to automate a repetitive validation step, or update the team's internal tooling with a new decision pattern you've identified. Your work feeds directly into the automation that makes the next review faster and more consistent.
About the team
The S3T team sits within Amazon Security and is responsible for evaluating and securing third-party services used across the company. The team is composed of security engineers at multiple levels who partner closely with builder teams, legal, and privacy stakeholders. Our mission is to scale security through software — encoding high-judgment decisions into automation so we can protect customers worldwide without growing linearly. We are building toward a future where every third-party integration is assessed proactively and continuously, and we are looking for engineers who want to help shape that vision.
Basic qualifications
- 2+ years of web protocols, common security attacks, and remediation (non-internship) experience
- Bachelor's degree in Engineering, Computer Science, or a related field
- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
- Experience with web protocols, common security attacks, and remediation (non-internship)
- Experience solving basic problems by writing code or scripts with some assistance
Preferred qualifications
- Experience with AWS services or other cloud offerings
Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.
Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.
USA, VA, Arlington - 136,000.00 - 184,000.00 USD annually
How we rate this
Security Engineer I, Secure Third Party Tools (S3T) at Amazon rates 50 out of 100 for how much of the daily work is AI. That makes it Uses AI (AI Level 2 of 4). The level is about AI in the job, not seniority.
Uses AI. An ordinary role that requires AI tools.
- ●●●● Builds AI80 to 100
- ●●●○ Works on AI60 to 79
- ●●○○ Uses AI40 to 59
- ●○○○ Little AI0 to 39
Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.
Prepare for this job
Built from this posting and from similar jobs on Level.
Skills and AI tools this role asks for
Also common in cybersecurity jobs at this level
Pay
- This job starts at
- $136k
- Typical cybersecurity job
- $159k
This posting starts 15% below the typical cybersecurity job. See cybersecurity jobs
Questions you could be asked
- Tell me about a project where security engineering was part of your work. What did you do?
- Tell me about a project where threat modeling was part of your work. What did you do?
- Tell me about a project where penetration testing was part of your work. What did you do?
- Tell me about a project where risk assessment was part of your work. What did you do?
- Walk me through how you've used Python in your day-to-day work.
Adapt your resume
- List these exact terms on your resume: Security Engineering, Threat Modeling, Penetration Testing, Risk Assessment, and Python. An applicant tracking system matches the wording, not the idea.
- Attach one line of real, concrete experience to at least one of them. A tool named with nothing behind it rarely survives a human read.
- Put the AI tool in a bullet point about what you did, not just in a skills list. This role treats it as a required part of the job.
Want an expert to read your CV for this job?
Free. Send your CV and the role you want next. We reply by email within 2 to 4 business days.
Get new cybersecurity jobs (Uses AI ●●○○ or higher) by email
One email a week with the new cybersecurity jobs (Uses AI ●●○○ or higher), each rated for how much AI is in the work. No recruiter spam, unsubscribe in one click.
Free. One email a week. Unsubscribe in one click.
Similar roles
Security roles that use AI, at other companies.
What kind of AI work fits you?
Answer 12 practical questions in about three minutes. Get a simple profile, the work it points to, and live roles to explore next.
Find my next step