Support Engineer, Identity and Access Management

Amazon's Security Compliance Investigations team protects our most sensitive and regulated data by monitoring and investigating access at scale. We are seeking an experienced Security Support Engineer to lead complex investigations, set quality standards, and help the team grow.

In this role, you will lead high-stakes investigations that require advanced SQL analysis and pattern recognition across large datasets to determine compliance with data access policies. You will connect patterns others miss, engage stakeholders and their leadership to drive remediation, and establish best practices that keep internal customers compliant. You will own the quality bar for investigation documentation and access-request reviews, refine how the team investigates, and mentor engineers to elevate the capability of the entire team. This is a hands-on, investigation-heavy role for engineers who combine technical depth with sound judgment.

Key job responsibilities

- Lead complex investigations by reviewing SQL and access records to determine what data was accessed, interpreting dashboards and logs to identify patterns across large datasets, and reaching clear compliance determinations with limited guidance

- Own the quality of investigation documentation, clearly articulating impact, steps taken, and case state, and serve as the lead reviewer for content in your area of technical expertise

- Engage stakeholders and their leadership to understand access behavior, drive remediation, and establish best practices that help internal customers stay compliant with data-sharing and data-handling policies

- Evaluate access requests to protected data against policy, assess internal use cases for compliance, and identify recurring issues to improve investigation methods and standard operating procedures

- Act as a subject matter expert and technical point of contact for escalations, mentor other engineers on the team to raise their capability, and use data to identify and drive development of new support mechanisms and tools

A day in the life

You will lead the team's most complex investigations: reviewing SQL and access records to determine what data was accessed, connecting patterns across dashboards and large datasets, and reaching clear compliance determinations. You will engage stakeholders and their leadership to remediate access behavior and set best practices for staying compliant. You will own the review of access requests to protected data, evaluating internal use cases against data-sharing and data-handling policy. Where an investigation calls for it, you will write queries to validate findings across datasets. You will also improve how the team investigates by refining methods and standard operating procedures, and mentor less experienced engineers.

This role includes occasional on-call responsibilities.

About the team

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.

The Security Compliance Investigations team protects Amazon's most sensitive and regulated data by monitoring and investigating access to protected data. As an experienced engineer on the team, you will lead complex investigations into how data was accessed and whether that access complies with policy, set the standard for how the team reaches compliance determinations, and help other engineers grow.

Our team is building robust investigation capabilities that scale with Amazon's growth. We value careful analysis, sound judgment, and collaboration. You will work alongside talented engineers who are passionate about security and compliance, and you will have opportunities to shape how we protect data and support the business.

Basic qualifications

- Experience with advanced use of SQL for data mining and business intelligence, or experience troubleshooting problems and offering solutions to streamline complex challenges

- Knowledge of writing and optimizing SQL queries in a business environment with large-scale, complex datasets

- Experience troubleshooting problems and offering solutions to streamline complex challenges, or experience working with stakeholders

- Experience with data analytics platforms (Power BI, Python, SQL, Tableau), or experience working with Excel, reporting tools, and large-scale data mining tools, such as Power BI, Python, SQL, or Tableau

- Experience performing data analysis and troubleshooting data integrity issues

- Experience with any combination of the following: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing

- Bachelor's degree or above in Computer Science, Computer Engineering, Cybersecurity, or other related discipline, or experience with equivalent introductory technical domain knowledge

Preferred qualifications

- Knowledge of security best practices

- Experience mentoring or training the engineering community on complex technical issues

- Experience that includes strong analytical skills, attention to detail, and effective communication abilities, or experience in technical support

- Experience communicating with a wide range of stakeholders, including colleagues and leadership, or experience with external customer interaction

- Experience in written and oral communication, including the ability to communicate with all levels in the organization (technical, business, executive)

- Can work proactively and independently, meet deadlines, and deliver on projects and tasks

- Experience using or securing services in AWS or other cloud computing environments

Amazon is an equal opportunities employer. We believe passionately that employing a diverse workforce is central to our success. We make recruiting decisions based on your experience and skills. We value your passion to discover, invent, simplify and build. Protecting your privacy and the security of your data is a longstanding top priority for Amazon. Please consult our Privacy Notice (https://www.amazon.jobs/en/privacy_page) to know more about how we collect, use and transfer the personal data of our candidates.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.