Software Development Engineer, AWS Security Epoxy

Job :  | Amazon Development Centre (London) Limited

Amazon Security operates at a scale few engineers ever get to work at. Epoxy is the team that builds the automation making that coverage possible. We are looking for a Software Development Engineer to support the building and operating of the platforms that onboard threat detection, remediate security risk, and accelerate security response across every AWS account.

AWS Security, Epoxy builds a collection of automation platforms for AWS Security. We enable threat detection across a large fleet of AWS accounts (onboarding coverage, auditing it continuously, and making findings available to partner teams), we help partner teams remediate detected risks and respond to incidents automatically at scale, and we run the foundational services (communications, workflow orchestration, data enrichment, and secure access) that the rest of AWS Security operations relies on.

Our systems operate at very high scale and carry a high operational bar: you build it, you run it.

You are a Software Development Engineer who enjoys taking a difficult, loosely specified problem and turning it into a well designed, thoroughly tested, and cleanly operated system. You care about the quality of what you ship and about leaving the systems you touch better than you found them. Experience in security is a plus, but it is not a requirement: what matters most is that you build robust, maintainable, high quality software using modern practices and technologies such as AWS services, Python, and Type Script, and that you take ownership of the operational health of what you deliver.

• Design and deliver features and components that solve difficult problems across AWS Security Epoxy's services, working independently from a well understood business goal even when the implementation is not fully specified.
• Own the operational excellence of the systems you work on: instrument them, alarm on the right signals, and drive down operational load through automation rather than manual toil.
• Write high quality, well tested code that meets a high engineering bar, and clear documentation and runbooks that let others maintain and extend your work.
• Participate in the team on-call rotation, supporting our services and responding to high-severity requests from AWS Security operations and Partner Teams. You resolve issues, then eliminate their contributing causes with permanent fixes.
• Improve the resiliency, scalability, and safety of systems that operate at very high scale, making sound trade-offs between short-term needs and long-term maintainability.
• Raise the bar through code reviews, design reviews, operational readiness reviews, and post-incident analyses, giving useful and actionable feedback including to more senior engineers.
• Mentor newer teammates and interns, and begin to influence partner teams by helping them adopt sound engineering and operational practices.

You pick up a feature request on one of Epoxy's services, break it into deliverable pieces, and ship it incrementally with tests and monitoring in place.

You review a teammate's design, ask the questions that surface a hidden resiliency risk, and help simplify the approach before code is written.

On an on-call week, you triage a high-severity issue, mitigate customer impact quickly, then open the follow-up work to make sure that class of failure cannot recur.

You spot a piece of manual operational work your team repeats every week and replace it with automation, giving the whole team time back.

You sync with a partner detection or response team to understand how they use an Epoxy capability, and feed what you learn back into the roadmap.