Senior Security Engineer, Ads Security
About The Position
The Ads Security organization at Amazon is dedicated to creating innovative technical solutions that detect, assess, and mitigate security risks within Amazon’s Advertising businesses. Our vision is to accelerate the development velocity of the Advertising business by ensuring that our products are inherently secure. We are seeking a talented Senior Security Engineer to join our team, where you will have the opportunity to contribute to securing web applications and services critical to delivering exceptional customer and partner experiences at scale in Amazon Ads. The ideal candidate is a security engineer first, with a builder's mindset and a track record of shipping AI powered solutions that solve real security problems at scale. They don't just experiment with AI; they've deployed it in production, measured its impact, and iterated based on outcomes. They have deep, hands-on expertise in security engineering fundamentals: threat modeling, secure system design, vulnerability analysis, incident response, and defensive architecture. They understand attacker methodologies and think about security from first principles, not just tool outputs. They have proven experience building security solutions powered by AI that operate reliably at scale. They are comfortable navigating ambiguity, defining problems before solving them, and influencing others through technical depth and clear communication. They set the bar for engineering quality on their team and raise the level of everyone around them. They are energized by the opportunity to pioneer a new discipline: applying generative AI and agentic systems to security challenges that were previously unsolvable through automation alone. Their role will be pivotal in ensuring the protection of customer data and critical infrastructure within the Ads organization.
Requirements
- 5+ years of any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing experience
- 2+ years of demonstrated experience utilizing AI/ML technologies for security use cases, including prompt engineering, LLM integration, or ML pipeline development.
- Strong programming proficiency in Python, with additional experience in at least one of: Java, Go, Rust, or TypeScript.
- Experience with cloud security architecture (AWS preferred) including IAM, VPC, KMS, and security monitoring services.
- Proven ability to design and deliver large scale distributed systems with high availability and operational maturity.
- Track record of influencing technical strategy and driving cross team alignment on security initiatives.
- Bachelor's degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).
Nice To Haves
- Familiarity with Amazon Bedrock, SageMaker, or similar managed AI/ML services for production model deployment.
- Demonstrated success applying generative AI to reduce mean time to detect (MTTD) or mean time to respond (MTTR) in security operations.
- Contributions to open source security tools or published research in AI for cybersecurity.
- Experience with retrieval augmented generation (RAG) architectures for security knowledge bases and documentation.
- Advanced degree (MS/PhD) in Computer Science, Machine Learning, Cybersecurity, or a related field.
- AWS certifications (Security Specialty, Solutions Architect, or Machine Learning Specialty).
Responsibilities
- Design and build AI powered security automation solutions to fix security issues at scale.
- Develop and maintain agentic AI workflows that enable faster security issue resolution.
- Build evaluation frameworks and feedback loops to continuously measure and improve the accuracy, reliability, and safety of AI driven security tools.
- Partner with other teams at Amazon to fine tune models for specific use cases in Amazon Ads, including anomaly detection, log analysis, and natural language security querying.
- Define technical roadmaps for security automation initiatives, influencing org level priorities and driving alignment across partner teams.
- Author and review technical design documents, threat models, and architecture proposals for security automation services.
- Mentor engineers across the organization on best practices such as secure AI/ML system development and security automation patterns.
- Establish operational excellence standards for AI security systems, including monitoring, alerting, and human in the loop safeguards.
- Participate in on call rotations for security automation services, ensuring rapid response to production incidents and service degradation.
- Provide regular updates to leadership on project status, risks, and strategic decisions through written narratives and review mechanisms.
- Contribute to operational planning (OP1/OP2) including goal setting, resource planning, and roadmap prioritization for the team.
- Participate in helping to grow and develop a high performing engineering team.
- Support team development through code reviews, technical mentoring, career coaching, and fostering a culture of continuous learning.
- Perform ad-hoc security related initiatives as needed.
Benefits
- health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
- 401(k) matching
- paid time off
- parental leave
- sign-on payments
- restricted stock units (RSUs)
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Senior
