Senior Security Engineer, AWS Marketplace , AWS Marketplace

Description

A senior security engineer role within AWS Specialist and Partner Organization (ASP) to own security for the AWS Marketplace third‑party catalog. The role sets the bar for vetting, monitoring, and protecting 3P software across its lifecycle, partners with Application Security and Engineering teams, and has high visibility across millions of customers.

• Own the security strategy for the AWS Marketplace 3P catalog, including ingestion, scanning, vulnerability management, and ongoing posture monitoring of seller‑provided artifacts (AMIs, containers, SaaS, data products, ML models).
• Identify systemic risks across the catalog and lead remediation campaigns that span multiple teams and orgs.
• Investigate and respond to security findings, vulnerabilities, and incidents involving Marketplace services and 3P content.
• Partner with App Sec to drive threat modeling, secure design reviews, and code reviews for Marketplace services.
• Define and raise security standards for sellers and Marketplace internal teams, influencing policy, tooling, and automation to raise the security bar without slowing business.
• Mentor engineers across the org on secure development practices, cloud security, and threat modeling.
• Represent Marketplace security in cross‑AWS forums, working with AWS Security, service teams, and partner orgs.

• 4+ years of experience troubleshooting system issues, analyzing logs, or automating complex tasks with command‑line tools.
• 5+ years of experience identifying security issues and risks, and developing mitigation plans.
• 4+ years of experience scripting, programming, and security code review in common programming languages.
• Knowledge of at least two of the following programming languages:
  Scala, Java, Python, C/C++, or Go.

• Experience applying threat modeling or other risk‑identification techniques.
• Experience with security in service‑oriented architectures / microservices and web services.
• Experience leading engineering teams or serving as a technical mentor.
• Experience in industry‑based security vulnerability identification, attack patterns, and remediation techniques.
• Experience troubleshooting system issues, analyzing logs, and automating tasks with command‑line tools.
• Experience scripting, programming, and security code reviewing in a common programming language.

Amazon is an equal‑opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status. If you have a disability and need accommodations during the application or hiring process, visit (Use the "Apply for this Job" box below)..

Salary ranges for this position: USA, CO, Denver – $ – $ USD annually; USA, WA, Seattle – $ – $ USD annually. The package includes sign‑on payments and restricted stock units (RSUs). Benefits include health, dental, vision, prescription, basic life & AD&D insurance, supplemental life plans, EAP, mental health support, flexible spending accounts, adoption and surrogacy reimbursement coverage, 401(k) matching, paid time off, and parental leave.

Job :

A. Final date to receive applications:
Jun 15, 2026.

Location:

USA, CO, Denver or USA, WA, Seattle.