Software Development Engineer, AWS Vulnerability Management

Amazon•Arlington, VA

18d

About The Position

In this role, you will design and build innovative tooling and GenAI-powered solutions that enable attestation of fleet and security control information to internal and external audit and regulatory bodies. You will create systems that help security engineers investigate, understand, and articulate the true nature of risks associated with software vulnerabilities across AWS. Your work will include building automation to prioritize risks, developing programs that report accurately on contextualized risk, and collaborating closely with stakeholders in Security Assurance and Proactive Security to simplify how we measure risk across our lines of business and services. This role combines long-term strategic technical projects that raise the bar on security tooling across the enterprise with the excitement and challenge of rapidly adapting to changing attestation needs for a globally distributed fleet. In this role you will be expected to deliver: Design and build scalable tools and platforms that automate the collection, validation, and attestation of security control and fleet data Develop systems that enable security teams to investigate and contextualize vulnerability risks across all AWS products and services Create APIs and integrations that connect compliance, risk, and attestation systems with audit workflows Build self-service capabilities that empower teams to efficiently respond to audit and regulatory requests GenAI & Intelligence Features Implement GenAI-powered features to accelerate evidence gathering, risk analysis, and compliance documentation Develop intelligent systems that help articulate and communicate risk context to diverse audiences Create automated report generation capabilities that translate technical security data into audit-ready attestations Leverage LLMs and machine learning to improve risk prioritization and decision-making Collaboration & Impact To be successful you will partner closely with Security Assurance and Proactive Security teams to understand requirements and deliver solutions that simplify risk measurement. You will work with security engineers to understand their workflows and build tools that enhance their effectiveness and collaborate with audit and compliance stakeholders to ensure tooling meets regulatory and attestation standards.

Requirements

5+ years of non-internship professional software development experience
5+ years of programming with at least one software programming language experience
5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience
Experience as a mentor, tech lead or leading an engineering team

Nice To Haves

5+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
Bachelor's degree in computer science or equivalent

Responsibilities

Design and build scalable tools and platforms that automate the collection, validation, and attestation of security control and fleet data
Develop systems that enable security teams to investigate and contextualize vulnerability risks across all AWS products and services
Create APIs and integrations that connect compliance, risk, and attestation systems with audit workflows
Build self-service capabilities that empower teams to efficiently respond to audit and regulatory requests
Implement GenAI-powered features to accelerate evidence gathering, risk analysis, and compliance documentation
Develop intelligent systems that help articulate and communicate risk context to diverse audiences
Create automated report generation capabilities that translate technical security data into audit-ready attestations
Leverage LLMs and machine learning to improve risk prioritization and decision-making
Partner closely with Security Assurance and Proactive Security teams to understand requirements and deliver solutions that simplify risk measurement
Work with security engineers to understand their workflows and build tools that enhance their effectiveness
Collaborate with audit and compliance stakeholders to ensure tooling meets regulatory and attestation standards
Contribute to the technical direction of compliance and attestation systems across AWS
Demonstrate both depth and breadth in your technical knowledge, from low-level systems to high-level architecture
Build robust, maintainable code that meets the highest standards for security and reliability
Define and track metrics and KPIs to measure the effectiveness and adoption of your tools
Participate in technical design reviews and contribute thought leadership on compliance automation