Software Development Engineer, AWS Vulnerability Management

Amazon•Arlington, VA

11d

About The Position

In this role, you will design and build innovative tooling and GenAI-powered solutions that enable attestation of fleet and security control information to internal and external audit and regulatory bodies. You will create systems that help security engineers investigate, understand, and articulate the true nature of risks associated with software vulnerabilities across AWS. Your work will include building automation to prioritize risks, developing programs that report accurately on contextualized risk, and collaborating closely with stakeholders in Security Assurance and Proactive Security to simplify how we measure risk across our lines of business and services. This role combines long-term strategic technical projects that raise the bar on security tooling across the enterprise with the excitement and challenge of rapidly adapting to changing attestation needs for a globally distributed fleet. In this role you will be expected to deliver: Design and build scalable tools and platforms that automate the collection, validation, and attestation of security control and fleet data Develop systems that enable security teams to investigate and contextualize vulnerability risks across all AWS products and services Create APIs and integrations that connect compliance, risk, and attestation systems with audit workflows Build self-service capabilities that empower teams to efficiently respond to audit and regulatory requests GenAI & Intelligence Features Implement GenAI-powered features to accelerate evidence gathering, risk analysis, and compliance documentation Develop intelligent systems that help articulate and communicate risk context to diverse audiences Create automated report generation capabilities that translate technical security data into audit-ready attestations Leverage LLMs and machine learning to improve risk prioritization and decision-making Collaboration & Impact To be successful you will partner closely with Security Assurance and Proactive Security teams to understand requirements and deliver solutions that simplify risk measurement. You will work with security engineers to understand their workflows and build tools that enhance their effectiveness and collaborate with audit and compliance stakeholders to ensure tooling meets regulatory and attestation standards. T Key job responsibilities Tooling & Automation Development Design and build scalable tools and platforms that automate the collection, validation, and attestation of security control and fleet data Develop systems that enable security teams to investigate and contextualize vulnerability risks across all AWS products and services Create APIs and integrations that connect compliance, risk, and attestation systems with audit workflows Build self-service capabilities that empower teams to efficiently respond to audit and regulatory requests GenAI & Intelligence Features Implement GenAI-powered features to accelerate evidence gathering, risk analysis, and compliance documentation Develop intelligent systems that help articulate and communicate risk context to diverse audiences Create automated report generation capabilities that translate technical security data into audit-ready attestations Leverage LLMs and machine learning to improve risk prioritization and decision-making Collaboration & Impact Partner closely with Security Assurance and Proactive Security teams to understand requirements and deliver solutions that simplify risk measurement Work with security engineers to understand their workflows and build tools that enhance their effectiveness Collaborate with audit and compliance stakeholders to ensure tooling meets regulatory and attestation standards Contribute to the technical direction of compliance and attestation systems across AWS Technical Excellence Demonstrate both depth and breadth in your technical knowledge, from low-level systems to high-level architecture Build robust, maintainable code that meets the highest standards for security and reliability Define and track metrics and KPIs to measure the effectiveness and adoption of your tools Participate in technical design reviews and contribute thought leadership on compliance automation About the team About Amazon Security Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Requirements

5+ years of non-internship professional software development experience
5+ years of programming with at least one software programming language experience
5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience
Experience as a mentor, tech lead or leading an engineering team
5+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
Bachelor's degree in computer science or equivalent

Responsibilities

Design and build scalable tools and platforms that automate the collection, validation, and attestation of security control and fleet data
Develop systems that enable security teams to investigate and contextualize vulnerability risks across all AWS products and services
Create APIs and integrations that connect compliance, risk, and attestation systems with audit workflows
Build self-service capabilities that empower teams to efficiently respond to audit and regulatory requests
Implement GenAI-powered features to accelerate evidence gathering, risk analysis, and compliance documentation
Develop intelligent systems that help articulate and communicate risk context to diverse audiences
Create automated report generation capabilities that translate technical security data into audit-ready attestations
Leverage LLMs and machine learning to improve risk prioritization and decision-making
Partner closely with Security Assurance and Proactive Security teams to understand requirements and deliver solutions that simplify risk measurement
Work with security engineers to understand their workflows and build tools that enhance their effectiveness
Collaborate with audit and compliance stakeholders to ensure tooling meets regulatory and attestation standards
Contribute to the technical direction of compliance and attestation systems across AWS
Demonstrate both depth and breadth in your technical knowledge, from low-level systems to high-level architecture
Build robust, maintainable code that meets the highest standards for security and reliability
Define and track metrics and KPIs to measure the effectiveness and adoption of your tools
Participate in technical design reviews and contribute thought leadership on compliance automation