The Security for Employee and Legal Systems (SEALS) team at Amazon focuses on protecting enterprise HR and Legal applications used by millions of employees. As a Security Engineer, you will be responsible for threat modeling and securing applications that incorporate GenAI features. You will work closely with builder teams to ensure security outcomes and provide guidance on secure coding practices. This role emphasizes collaboration, mentorship, and proactive risk management throughout the software development lifecycle.

• 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or similar object-oriented languages.
• 2+ years of experience in scripting, programming, and security code review in a common programming language.
• 2+ years of experience troubleshooting systems issues, analyzing logs, or automating tasks using command line tools.
• Bachelor's degree in a STEM field or equivalent experience in IT Security.
• Knowledge of industry-based security vulnerabilities and remediation techniques.
• 2+ years of experience in threat modeling, secure coding, identity management, software development, cryptography, system administration, or network security.
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP.
• Experience with AWS products and services.
• Experience performing security activities across various phases of the software development lifecycle.

• Own the security outcomes for assigned SEALS builder teams and the HR and Legal applications they manage.
• Threat model GenAI and LLM-backed applications, addressing risks such as prompt injection and insecure output handling.
• Secure agentic workflows, including transitive authentication and scoped authorization.
• Author and refine automated detection rules to catch risks at code commit.
• Utilize GenAI to enhance delivery across your domain, including AI-assisted code review.
• Drive adoption of secure practices to prevent issues from occurring.
• Conduct adversarial analysis and manual secure code reviews to identify risks.
• Provide security architecture guidance and lead design reviews for your team.
• Prioritize remediation efforts based on business impact and escalate risks to leadership as necessary.
• Communicate security outcomes effectively to both technical and non-technical audiences.

• Employees at Amazon are often offered comprehensive health benefits—including multiple medical plan options (no pre-existing condition exclusions, 100% covered in-network preventive care), dental and vision plans, a 24/7 medical advice line from day one, expert second-opinion services, and broad mental-health support with several free counseling sessions (including pediatric). Financial wellness typically includes a 401(k) with company match (up to 2%), Restricted Stock Units (equity), FSAs, an emergency savings program, product and partner discounts, and even college-savings and home-purchase programs. Overall, the package is designed to support employees and their families’ health, finances, and day-to-day life.