Sr. Security Engineer, AWS Support - Kumo, Kumo

ID: 5579

Type: Full-time

Category: Others

Company Name: Amazon Web Services, Inc.

Location: USA, WA, Seattle - Seattle - United States

Salary: 178,400.00 - 226,700.00 USD annually

Job Description

Help us protect not only the Amazon Web Services (AWS) cloud computing environment but all of our
customers as well!

As a Security Engineer in AWS Support-Kumo, you will be on the forefront of many security issues for a wide variety of platforms and technologies including cloud services, GenAI, identity and access management, mobile devices, all operating at massive scale. You will have direct impact on the experience of customers and their security efforts through building the next generation of AI powered solutions.

We are looking for an Security Engineer to help validate that our services, applications, and tools are designed and implemented to the highest security standards. You will be responsible for analyzing the security of applications and services, discovering and addressing security issues in the design phase, building security automation, and quickly reacting to new threat scenarios. You will have the opportunity to learn from, and be mentored by, those who are building and securing our high-tech services.

A Security Engineer at Amazon/AWS is expected to be efficient in multiple domains and provide significant contributions to the AWS Support & Security teams. Security engineers are expected to develop elegant solutions to complex business problems and apply appropriate technologies while following security engineering best practices. The ideal candidate has strong technical knowledge in secure software development, high judgment to prioritize and address security risks, and experience holding high standards for security controls and work products. Engineers in this role are expected to participate fully in the planning of the AWS Support team's work and constantly seek opportunities for process improvement.

The ideal candidate combines deep technical expertise with exceptional leadership and communication skills. You'll need to clearly articulate complex security risks to both technical and non-technical audiences, effectively harmonize diverse perspectives, and skillfully prioritize risks to guide teams toward secure solutions through influence and collaboration. This role requires a security professional who thrives when partnering closely with product and engineering teams to deliver the most secure customer solutions possible.

Key job responsibilities

- Drive security decisions across product development workstreams,
- Partner with engineering leaders across Kumo to reduce the friction for builders to develop services that are secure-by-design,
- Projects and software development work as needed
- Security training and outreach to internal development teams
- Security guidance documentation
- Security tool development
- Security metrics delivery and improvements
- Assistance with recruiting activities and administrative work

About the team
AWS Kumo combines the culture of a startup, the innovation and creativity of an R&D Lab, the work-life balance of a mature organization, and provides amazing technical challenges at AWS's scale. Our team provides technology and trusted expertise that intelligently anticipate and resolve AWS customer needs, helping them adopt, optimize, and operate at scale. Kumo’s products, used by AWS customers and the support teams that help them, are vital to ensuring exceptional customer experiences on AWS. Our team owns customer facing applications like Trusted Advisor, Personal Health Dashboard, AWS re:Post, and Support Center and multiple internal tooling systems. We are a highly innovative global organization revolutionizing the way customers engage and seek help from AWS. Support provides a strategic advantage for customers adopting AWS and drives direct revenue to the business.

Basic Qualifications

- 4+ years of non-internship background in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools experience
- 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
- 4+ years of (non-internship) scripting, programming, and security code review in common programming languages experience
- Knowledge of at least two of the following programming languages: Scala, Java, Python, C/C++, or Go
- Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
- Experience (non-internship) in troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
- Experience working in identifying security issues and risks, and developing mitigation plans
- Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques
- Experience as a mentor, tech lead or leading an engineering team

Preferred Qualifications

- Experience applying threat modeling or other risk identification techniques or equivalent
- Experience with security in service-oriented architectures/microservices and web services

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, TX, Dallas - 178,400.00 - 226,700.00 USD annually
USA, VA, Arlington - 178,400.00 - 226,700.00 USD annually
USA, VA, Herndon - 178,400.00 - 226,700.00 USD annually
USA, WA, Bellevue - 178,400.00 - 226,700.00 USD annually
USA, WA, Seattle - 178,400.00 - 226,700.00 USD annually

Company Information

Company Name: Amazon Web Services, Inc.

Company Website: https://aws.amazon.com

Company Address: 410 Terry Ave N, Seattle, WA 98109-5210, United States

Amazon Web Services, Inc. (AWS) is the cloud computing and infrastructure arm of Amazon.com, Inc., offering a broad and evolving portfolio of on-demand cloud services, platform services, and infrastructure products for organizations of all sizes. Founded to provide scalable, reliable, and cost-effective computing resources over the internet, AWS enables customers to deploy and run applications and services without the need to build and maintain physical datacenters. The company’s public materials describe it as a provider of on-demand cloud computing platforms and APIs to individuals, companies, and governments, supplying infrastructure and higher-level services that accelerate application development, data processing, storage, and global delivery. Core business activities: AWS’s primary business is the design, operation, and delivery of cloud-based computing resources and managed services. That includes offering virtualized compute capacity, object and block storage, database engines (managed relational and NoSQL), networking primitives, identity and access management, security and compliance tooling, analytics and big-data processing stacks, machine learning and AI services, developer and application deployment tools, serverless computing, container orchestration services, content delivery, and Internet of Things (IoT) connectivity. AWS also provides enterprise-focused offerings such as hybrid cloud solutions, migration services to assist organizations in moving on-premises workloads to the cloud, managed operations and support plans, professional services, and training and certification programs for IT professionals. Main products and services: AWS’s product set spans foundational infrastructure to highly managed, domain-specific offerings. Key foundational services include Amazon Elastic Compute Cloud (EC2) for virtual servers, Amazon Simple Storage Service (S3) for scalable object storage, and Amazon Virtual Private Cloud (VPC) for isolated networking. Managed database and data services include Amazon Relational Database Service (RDS), Amazon Aurora (a high-performance relational database), Amazon DynamoDB (a fully managed NoSQL database), Amazon Redshift (a petabyte-scale data warehouse), and Amazon ElastiCache (in-memory caching). For compute modernization, AWS provides AWS Lambda (serverless compute), Amazon Elastic Kubernetes Service (EKS), and Amazon Elastic Container Service (ECS). AWS’s advanced and specialized services include Amazon SageMaker for building, training, and deploying machine learning models; Amazon Rekognition for computer vision; Amazon Comprehend for natural language processing; AWS Glue and AWS Data Pipeline for ETL and data integration; and AWS IoT Core for connecting and managing Internet of Things devices. Application delivery and developer tooling include Amazon API Gateway, AWS CloudFormation for infrastructure as code, AWS CodePipeline and CodeBuild for CI/CD, and Amazon CloudFront for content delivery across a global edge network. The AWS Marketplace and AWS Partner Network (APN) provide channels for third-party software, consulting partners, and managed service providers to offer products and services that run on or integrate with AWS. Infrastructure, delivery model, and pricing: AWS operates a global infrastructure composed of multiple geographic Regions, each containing multiple Availability Zones—physically separate data center locations engineered for fault isolation and high availability. This global footprint supports data residency, low-latency delivery, and resilience for customers deploying distributed systems. AWS’s commercial model emphasizes flexible consumption and cost control: customers commonly choose pay-as-you-go billing for on-demand resources, with options for reserved capacity, savings plans, and spot instances to reduce costs for predictable or interruptible workloads. Support tiers and managed services are available at varying cost and service-level commitments. Security, compliance, and governance: AWS provides a suite of security and identity services—such as AWS Identity and Access Management (IAM), AWS Key Management Service (KMS), AWS CloudTrail, and AWS Config—to help customers secure environments, manage access, encrypt data, and demonstrate compliance. AWS documents participation in standard industry compliance frameworks and certifications, and publishes detailed security and compliance resources to help customers meet regulatory obligations. Customer segments and use cases: AWS serves a broad range of customers that include startups, established enterprises, public sector organizations, educational institutions, and independent software vendors. Common use cases include web and mobile application hosting, data analytics and warehousing, machine learning and AI workloads, backup and disaster recovery, IoT deployments, gaming infrastructure, and enterprise application modernization. AWS emphasizes scalability, elasticity, and rapid provisioning to support development velocity and business agility. Ecosystem, training, and partner network: AWS supports a large ecosystem of technology and consulting partners that build, certify, and deliver solutions on the platform. The company offers official training, certifications, and documentation to help developers, architects, and IT professionals gain proficiency on its services. AWS Marketplace and partner programs provide channels for third-party software procurement and professional services. Business model and positioning: AWS generates revenue principally through consumption-based fees for cloud services and through related professional services and support offerings. It competes in the global cloud infrastructure market with other major cloud providers by focusing on breadth of services, global infrastructure, developer tooling, partner ecosystem, and continuous release of new managed services. AWS positions itself as an enabler for digital transformation by reducing the capital and operational burden of running infrastructure, allowing customers to focus on application development and business innovation. For additional, up-to-date, and authoritative information on product details, global infrastructure, security programs, and service announcements, AWS’s official website and documentation pages provide comprehensive resources and customer-facing materials.

Visit company vacancy