Security Engineer, Field Innovation, Security Search and Observability (SSO)

Role overview

Key responsibilities

• Run early-access customer previews, threat modeling, security-agent vulnerability assessments, and remediation guidance.
• Shape detection coverage and service roadmaps based on customer and partner insights.
• Develop and implement detection content, reduce false positives, and measure security value and coverage.
• Expand detection coverage across cloud resources, runtime, and AI/ML workloads.
• Monitor evolving cloud-security threats, including threats targeting agentic AI and ML applications.
• Collaborate across science, engineering, partner, and field teams.

Basic qualifications

• 3+ years of non-internship scripting, programming, and security code review experience in a common programming language.
• 3+ years of non-internship experience troubleshooting systems, analyzing logs, or automating tasks with command-line tools.
• Bachelor’s degree in a STEM field or 3+ years of IT Security experience.
• Knowledge of industry-based security vulnerabilities and remediation techniques.
• Experience scripting, programming, and reviewing security code in a common programming language.

Preferred qualifications

• Experience in one or more of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
• AWS product experience, common-language programming or security-review experience, and customer-facing experience are preferred.
• Experience in security activities across software development lifecycle phases is preferred.

Technical environment

• AWS Security Hub, CloudTrail, GuardDuty, and AWS Continuum.
• Large language models, AI-assisted development tools, security agents, agent frameworks, and retrieval-augmented generation.

Compensation

• Base salary varies by location; listed ranges are annual. Bellevue range is $159,300–$202,400. Other advertised locations have separate ranges.