Software Development Engineer - Security Automation, AWS Security Epoxy

Amazon Security operates at a scale few engineers ever get to work at. Epoxy is the team that builds the automation making that coverage possible. We are looking for a Software Development Engineer to support the building and operating of the platforms that onboard threat detection, remediate security risk, and accelerate security response across every AWS account.

AWS Security, Epoxy builds a collection of automation platforms for AWS Security. We enable threat detection across a large fleet of AWS accounts (onboarding coverage, auditing it continuously, and making findings available to partner teams), we help partner teams remediate detected risks and respond to incidents automatically at scale, and we run the foundational services (communications, workflow orchestration, data enrichment, and secure access) that the rest of AWS Security][ operations relies on. Our systems operate at very high scale and carry a high operational bar: you build it, you run it.

You are a Software Development Engineer who enjoys taking a difficult, loosely specified problem and turning it into a well designed, thoroughly tested, and cleanly operated system. You care about the quality of what you ship and about leaving the systems you touch better than you found them. Experience in security is a plus, but it is not a requirement: what matters most is that you build robust, maintainable, high quality software using modern practices and technologies such as AWS services, Python, and TypeScript, and that you take ownership of the operational health of what you deliver.

Key job responsibilities

• Design and deliver features and components that solve difficult problems across AWS Security Epoxy"s services, working independently from a well understood business goal even when the implementation is not fully specified.
• Own the operational excellence of the systems you work on: instrument them, alarm on the right signals, and drive down operational load through automation rather than manual toil.
• Write high quality, well tested code that meets a high engineering bar, and clear documentation and runbooks that let others maintain and extend your work.
• Participate in the team on-call rotation, supporting our services and responding to high-severity requests from AWS Security operations and Partner Teams. You resolve issues, then eliminate their contributing causes with permanent fixes.
• Improve the resiliency, scalability, and safety of systems that operate at very high scale, making sound trade-offs between short-term needs and long-term maintainability.
• Raise the bar through code reviews, design reviews, operational readiness reviews, and post-incident analyses, giving useful and actionable feedback including to more senior engineers.
• Mentor newer teammates and interns, and begin to influence partner teams by helping them adopt sound engineering and operational practices.

A day in the life

You pick up a feature request on one of Epoxy"s services, break it into deliverable pieces, and ship it incrementally with tests and monitoring in place.

You review a teammate"s design, ask the questions that surface a hidden resiliency risk, and help simplify the approach before code is written.

On an on-call week, you triage a high-severity issue, mitigate customer impact quickly, then open the follow-up work to make sure that class of failure cannot recur.

You spot a piece of manual operational work your team repeats every week and replace it with automation, giving the whole team time back.

You sync with a partner detection or response team to understand how they use an Epoxy capability, and feed what you learn back into the roadmap.

About the team

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn"t followed a traditional path, or includes alternative experiences, don"t let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon"s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it"s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We"re continuously raising our performance bar as we strive to become Earth"s Best Employer. That"s why you"ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there"s nothing we can"t achieve.