Software Development Engineer - Security Automation, AWS Security Epoxy

Amazon Security operates at a scale few engineers ever get to work at, and Epoxy is the team that builds the automation making that scale possible. We are hiring a Software Development Engineer to build and operate the platforms that put threat detection on the AWS account fleet, remediate risk automatically, and give security responders the tooling they act on. You do not need a security background. You need to be good at building systems.

Epoxy sits inside AWS Security and own four things. We onboard threat detection across the internal account fleet and audit that coverage continuously. We give partner detection teams the machinery to remediate what they find, automatically, without a human in the path. We run the foundational services the rest of AWS Security operations depends on: communications, workflow orchestration, data enrichment, and secure access. And because AWS Security runs these products on itself before anyone else does, we find the interesting failures first.

This is a build-it-and-run-in team, and we mean it in both directions. You own the operational health of what you ship, and we protect the capacity to do that properly: on-call is a real rotation with a bounded share in each sprint, not an ambient expectation on top of feature work.

The work suits an engineer who likes a hard, loosely specified problem and wants to turn it into a designed, tested, cleanly operated system. You will work in Python and TypeScript on AWS primitives, and you will leave the systems you touch better than you found them.

Key job responsibilities
- Design and deliver features and components that solve difficult problems across AWS Security Epoxy's services, working independently from a well understood business goal even when the implementation is not fully specified.

- Own the operational excellence of the systems you work on: instrument them, alarm on the right signals, and drive down operational load through automation rather than manual toil.

- Write high quality, well tested code that meets a high engineering bar, and clear documentation and runbooks that let others maintain and extend your work.

- Participate in the team on-call rotation, supporting our services and responding to high-severity requests from AWS Security operations and Partner Teams. You resolve issues, then eliminate their contributing causes with permanent fixes.

- Improve the resiliency, scalability, and safety of systems that operate at very high scale, making sound trade-offs between short-term needs and long-term maintainability.

- Raise the bar through code reviews, design reviews, operational readiness reviews, and post-incident analyses, giving useful and actionable feedback including to more senior engineers.

- Mentor newer teammates and interns, and begin to influence partner teams by helping them adopt sound engineering and operational practices.

A day in the life
You pick up a feature request on one of Epoxy's services, break it into deliverable pieces, and ship it incrementally with tests and monitoring in place.

You review a teammate's design, ask the questions that surface a hidden resiliency risk, and help simplify the approach before code is written.

On an on-call week, you triage a high-severity issue, mitigate customer impact quickly, then open the follow-up work to make sure that class of failure cannot recur.

You spot a piece of manual operational work your team repeats every week and replace it with automation, giving the whole team time back.

You sync with a partner detection or response team to understand how they use an Epoxy capability, and feed what you learn back into the roadmap.

About the team
Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn't followed a traditional path, or includes alternative experiences, don't let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon's products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it's in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We're continuously raising our performance bar as we strive to become Earth's Best Employer. That's why you'll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why we strive for flexibility as part of our working culture. When we feel supported in the workplace and at home, there's nothing we can't achieve.

Basic Qualifications

- 3+ years of non-internship professional software development experience.
- 2+ years of non-internship experience designing or architecting (design patterns, reliability, and scaling) new and existing systems.
- Experience programming with at least one software programming language: Java, Python, or TypeScript.
- Bachelor's degree in Computer Science, a related field, or equivalent work experience.
- This role requires you to be a national of an EU Member state.

Preferred Qualifications

- 3+ years of experience with the full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations.
- Experience building and operating scalable, high-availability production systems, and owning their operational excellence.
- Experience developing with SQL and NoSQL databases, and with cloud technologies (AWS).
- Experience quickly prototyping new systems and solutions.
- Familiarity with security automation, threat detection, or incident response tooling (a plus, not required).
- Excellent written and oral communication skills.
- Meets/exceeds Amazon's leadership principles requirements for this role.
- Meets/exceeds Amazon's functional/technical depth and complexity for this role.

Amazon est un employeur engagé pour l'égalité des chances. Nous sommes convaincus qu'une main d'oeuvre diversifée est essentielle à notre réussite. Nous prenons nos décisions de recrutement en fonction de votre expérience et de vos compétences. Nous apprécions votre envie de découvrir, d'inventer, de simplifier et de construire. La protection de votre vie privée et la sécurité de vos données constituent depuis longtemps une priorité absolue pour Amazon. Veuillez consulter notre Politique de Confidentialité pour en savoir plus sur la façon dont nous collectons, utilisons et traitons les données personnelles de nos candidats.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.