Security Engineer - (IAM), Amazon Security

Amazon • Austin, TX

8d

About The Position

We are seeking a Security Engineer to join Amazon's Identity and Access
Management (IAM) team. In this role, you'll collaborate with experienced
engineers to participate in architectural reviews and threat models, while
developing and supporting Amazon's IAM initiatives. You'll be at the forefront
of ensuring secure access across our complex global environment, helping to
develop policies and procedures for identity lifecycle management, and providing
valuable input on authentication and authorization designs.

At Amazon, we believe in learning through doing. As a new engineer on our team,
you'll work alongside seasoned security professionals who will mentor you in
collecting and analyzing data, developing technical solutions, and communicating
security concepts to diverse audiences. You'll gain hands-on experience with
enterprise-scale IAM systems while contributing to projects that directly impact
Amazon's security posture. We understand that IAM is a specialized field, and
we're committed to helping you build expertise in this crucial security domain.

We're looking for individuals who are passionate about security, eager to learn,
and ready to tackle complex challenges. You'll be joining a team that values
innovation, embraces new ideas, and consistently strives to improve our security
infrastructure. While prior IAM experience is not required, we seek candidates
who demonstrate strong analytical abilities, excellent communication skills, and
a genuine interest in identity security. If you're excited about starting your
security career in an environment where you can make a significant impact while
learning from industry experts, we want to hear from you!

Requirements

• 2+ years of web protocols, common security attacks, and remediation (non-internship) experience
• Bachelor's degree in Engineering, Computer Science, or a related field
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent
• Experience with web protocols, common security attacks, and remediation (non-internship)
• Experience solving basic problems by writing code or scripts with some assistance

Nice To Haves

• Experience with AWS services or other cloud offerings

Responsibilities

• Implementing SAST/DAST detections and applying security best practices to business units and applications.
• Protecting and securing Amazon authentication and authorization workflows.
• Participate in the analysis, troubleshooting, investigation and remediation of identity security related activities and events.
• Implement and maintain automated security audits to ensure identity workflows adhere to industry standard security requirements.
• Create and maintain scripts to automate the generation of reports across various technologies.
• Collaborate with other Amazon Security Engineers to support cross-team programs and solutions.
• Work with teams on technologies such as Windows Single-Sign-On, Kerberos, FIDO/FIDO2, Passwordless Authentication, AuthZ, AuthN and Auditing.

Benefits

• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level