Senior Security Engineer, Ads Security

The ideal candidate will have a broad understanding of proactive security, have past experience leading security assessments, and have the ability to work with product and engineering teams in designing secure systems. In this role, you will conduct secure design reviews, code review and penetration testing, develop custom tools and frameworks to assist in proactive security and collaborate with product and engineering teams to build secure and resilient solutions. Your role will be pivotal in ensuring the protection of customer data and critical infrastructure within the Ads organization.


Key job responsibilities
As a Senior Security Engineer within Amazon’s Ads Security team, you will play a crucial role in ensuring that applications across numerous Ads platforms are designed and executed with the highest security standards to maintain customer trust. You will tackle a diverse array of security challenges, ranging from novel attack vectors in Ads services to selecting and implementing scalable and secure features. Additionally, you will serve as a subject matter expert, providing guidance to developers on building secure products and fostering a security-conscious culture within the organization.

* Conduct threat modeling, code review and penetration testing to identify security vulnerabilities in advertising applications and infrastructure.
* Contribute to security automation tooling for designing new detections within Amazon’s various security detection frameworks.
* Identify actionable solutions for identified vulnerabilities and collaborate with ads product and engineering teams to influence and prioritize their resolution.
* Contribute to fostering a strong security culture at Amazon through knowledge sharing and collaboration.
* Engage in cross-team projects aimed at enhancing the security posture of Amazon and customer data throughout its lifecycle.



A day in the life
Activities in this role include:
• Identifying security vulnerabilities in advertising applications and infrastructure.
• Influencing product teams and senior leadership to implement practices that maintain a high security bar.
• Proposing, collaborating & obtaining buy-in on strategic security initiatives.
• Recommending and developing security-focused tools that help product teams prevent security misconfiguration & vulnerabilities at scale.

About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores

Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

BASIC QUALIFICATIONS

- 5+ years of work in identifying security issues and risks, and developing mitigation plans experience
- Experience (non-internship) in scripting, programming, and security code reviewing in a common programming language
- Experience (non-internship) in industry-based security vulnerabilities identification, attack patterns, and remediation techniques

PREFERRED QUALIFICATIONS

- Experience with securing GenAI powered applications and agentic systems

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers.