Senior Security Engineer

As a Senior Security Engineer in Amazon Optics, you will help set and maintain security posture for distributed services deployed across AWS regions. This onsite role in Annapolis Junction, MD focuses on reducing risk across physical access control, alarm monitoring, video surveillance, and device management while supporting long-term, scalable mitigations at fleet scale.

Amazon Optics operates within an AWS Security organization. The team builds software that integrates with real-world hardware and meets availability, scalability, and security expectations for AWS. Engineers own critical systems end-to-end and work at the intersection of physical and logical security to protect every AWS customer.

• Lead security architecture reviews and threat modeling for services deployed across all AWS regions within a fully Infrastructure as Code environment, surfacing one-way-door technical decisions and advocating for durable long-term solutions
• Design and implement security controls that centralize protections across the platform, reducing reliance on independent solutions by individual service teams
• Create security frameworks, runbooks, and rubrics for new problem domains to support repeatable and scalable security outcomes across the organization
• Drive security investigations, escalation handling, and root‑cause analysis through COE processes to ensure systemic issues are permanently resolved
• Review code and peer‑produced architecture to support secure design, least privilege, correct authentication and authorization, and safe data handling
• Influence security decisions with partner organizations by balancing risk trade‑offs with business velocity and identifying practical compensating controls
• Mentor and develop security engineers, including contributions to hiring assessments, promotion evaluations, and career guidance

• 4+ years of non‑internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• 5+ years of experience identifying security issues and risks and developing mitigation plans
• 4+ years of non‑internship scripting, programming, and security code review using common programming languages
• Knowledge of at least two programming languages:
  Scala, Java, Python, C/C++, or Go
• Non‑internship experience identifying industry security vulnerabilities, attack patterns, and remediation techniques
• Experience serving as a mentor, tech lead, or leading an engineering team

• Experience applying threat modeling or other risk identification techniques (or equivalent)
• Experience with security in service‑oriented architectures, microservices, and web services

• Scala, Java, Python, C/C++, Go
• Infrastructure as Code
• COE processes

USD 178, per year

Annapolis Junction, MD (onsite)

• Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance, option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• Paid time off
• Parental leave
• Sign‑on payments and restricted stock units (RSUs)

Amazon Security values diverse experiences. If you do not meet every qualification, you are encouraged to apply.

In Amazon Security, learning and curiosity are core values. Ongoing DEI events and learning experiences support embracing uniqueness, and addressing the hardest security challenges includes seeking out and celebrating diverse ideas, perspectives, and voices.

• The role includes knowledge‑sharing, training, and other career‑advancing resources.
• Work‑life harmony is supported through flexible work hours and arrangements.

Security is central to maintaining customer trust and delivering strong customer experiences. The organization creates and maintains a high bar for security across Amazon products and services.