Security Engineer I, Secure Third Party Tools (S3T)

Are you motivated to protect customers at scale by building security into every third-party interaction? The Secure Third Party Tools (S3T) team within Amazon Security is shifting how we safeguard customer trust - moving from reactive assessments to proactive, automated protection. As a Security Engineer on this team, you will combine technical review expertise with a builder's mindset to evaluate third-party services, identify risks, and contribute to tooling that codifies security decisions into repeatable automation. You'll collaborate closely with service teams and senior security engineers, communicating risk clearly and driving resolution. This is a role for someone who is curious, adaptable, and eager to grow their security engineering craft while strengthening how Amazon manages vendor risk.

Key job responsibilities

- Perform technical security reviews of third-party services - including AI/ML integrations, cloud architectures, and services handling sensitive customer data - identifying gaps in security controls and recommending mitigations.

- Trace data flows through complex systems, threat model third-party use cases, and evaluate vendor penetration test reports to surface risks and drive proportionate remediation decisions.

- Contribute to AI-powered security tooling and automation that scales review decisions across the organization, scripting solutions and improving existing runbooks.

- Communicate identified risks and recommendations in written and verbal form to service teams and leadership, escalating where appropriate to drive resolution.

- Author and refine security decision rubrics and implementation patterns so that future engineers can build upon your findings.

A day in the life

You start by picking up a new third-party engagement, reviewing the architecture diagrams and data-flow documentation the service team has provided. You apply threat modeling to identify where sensitive data crosses trust boundaries, then draft your findings and discuss them with a senior engineer during a checkpoint. After lunch you might write a script to automate a repetitive validation step, or update the team's internal tooling with a new decision pattern you've identified. Your work feeds directly into the automation that makes the next review faster and more consistent.

About the team

The S3T team sits within Amazon Security and is responsible for evaluating and securing third-party services used across the company. The team is composed of security engineers at multiple levels who partner closely with builder teams, legal, and privacy stakeholders. Our mission is to scale security through software - encoding high-judgment decisions into automation so we can protect customers worldwide without growing linearly. We are building toward a future where every third-party integration is assessed proactively and continuously, and we are looking for engineers who want to help shape that vision.

Basic qualifications

- 2+ years of web protocols, common security attacks, and remediation (non-internship) experience

- Bachelor's degree in Engineering, Computer Science, or a related field

- Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent

- Experience with web protocols, common security attacks, and remediation (non-internship)

- Experience solving basic problems by writing code or scripts with some assistance

Preferred qualifications

- Experience with AWS services or other cloud offerings

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits.

USA, VA, Arlington - 136,000.00 - 184,000.00 USD annually