Senior Security Engineer, Corporate Services Security

Amazon is hiring a Senior Security Engineer, Corporate Services Security in Arlington, United States. It pays $178k-$227k a year and Level rates it ; you can apply on Amazon.

Level's read on this job

Little AI ●○○○ is how Level rates this cybersecurity role: aI is not part of the work.
The listed pay starts 10% above the typical cybersecurity posting on Level.
Level classifies it as a senior role.
Level lists 20,000+ other open roles at Amazon.
The role was posted in the last few days.

AI in this role

Are you passionate about solving complex security challenges at scale? We are looking for a Security Engineer to join our team and help protect Amazon's products, services, and customers. In this role, you will tackle large, ambiguous security problems - designing and validating security controls, conducting threat modeling, and driving risk mitigation strategies that have broad and lasting impact. You will work across teams to ensure that systems are built securely from the ground up, balancing pragmatic trade-offs with long-term security goals. If you are a collaborative problem solver who thrives in technical depth and wants to shape how security is practiced across an organization, this role offers the opportunity to do meaningful work at remarkable scale.

Key job responsibilities
- Lead security reviews, threat modeling, and architecture assessments for complex systems, identifying risks and guiding teams toward pragmatic, scalable mitigations.
- Design and build security frameworks, runbooks, and rubrics for emerging problem domains, enabling repeatable and consistent security outcomes across multiple teams.
- Partner with product and system owners to proactively design, implement, and validate security controls, ensuring solutions are extensible and have low adoption costs.
- Evaluate source code and system designs to identify vulnerabilities, recommend remediation strategies, and set a culture of secure engineering best practices including authentication, authorization, and least-privilege principles.
- Communicate security risk and design decisions clearly in writing to both technical and non-technical audiences, and mentor other engineers to raise the security bar across the organization.

A day in the life
You might start your morning reviewing a security design proposal from a partner team, identifying gaps in their authentication model and working with them to close those gaps before launch. After that, you could be building out a new threat-modeling rubric that will help dozens of teams assess risk consistently. In the afternoon, you may join an incident response discussion, analyzing root causes and recommending controls that prevent recurrence. Throughout it all, you collaborate with engineers, share your expertise, and help shape the security direction for your organization.

About the team
Our team is committed to maintaining the highest security standards across Amazon's products and services. We work at the intersection of security engineering and product development, partnering closely with builders to ensure that what we ship is secure by design. We value an inclusive team culture where every voice is heard and where engineers at all levels are encouraged to grow. Whether you are refining how we approach risk at scale or mentoring the next generation of security engineers, you will play a key role in our mission to earn and keep customer trust.

Basic qualifications

- 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
- 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
- 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
- Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
- Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
- Experience as a mentor, tech lead or leading an engineering team

Preferred qualifications

- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience with security in service-oriented architectures/microservices and web services

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually

How we rate this

Senior Security Engineer, Corporate Services Security at Amazon rates 37 out of 100 for how much of the daily work is AI. That makes it Little AI (AI Level 1 of 4). The level is about AI in the job, not seniority.

Classification

Little AI. AI is not part of the work.

●●●● Builds AI80 to 100
●●●○ Works on AI60 to 79
●●○○ Uses AI40 to 59
●○○○ Little AI0 to 39

Levels come from how often the tools, models and workflows of the role are named in the posting itself. Read the description and count the AI tools, models and workflows it names.