- Arlington, Virginia, United States
- On-site
- Full-time · Senior
- $178K–$227K per year
- 5+ years
Design and validate security controls, conduct threat modeling, and drive risk mitigation strategies to protect Amazon's products, services, and customers.
Compensation
The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually
Responsibilities
- Lead security reviews, threat modeling, and architecture assessments for complex systems, identifying risks and guiding teams toward pragmatic, scalable mitigations.
- Design and build security frameworks, runbooks, and rubrics for emerging problem domains, enabling repeatable and consistent security outcomes across multiple teams.
- Partner with product and system owners to proactively design, implement, and validate security controls, ensuring solutions are extensible and have low adoption costs.
- Evaluate source code and system designs to identify vulnerabilities, recommend remediation strategies, and set a culture of secure engineering best practices including authentication, authorization, and least-privilege principles.
- Communicate security risk and design decisions clearly in writing to both technical and non-technical audiences, and mentor other engineers to raise the security bar across the organization.
Requirements
- Nice to have: Threat modeling
- Nice to have: Risk identification techniques