Security Engineer , AI Security

Are you passionate about protecting customers and building security into products from the ground up? The Amazon AI Security team is looking for a Security Engineer to design security controls and validate that our AI and machine learning (ML) services, applications, and emerging technologies meet the highest security standards. You will analyze the security of AI/ML applications and services, discover and address security issues, build security automation, and take decisive action to mitigate emerging threats throughout the full secure development lifecycle (SDLC).

This role offers career growth opportunities as you gain new security skills through hands-on work. You will experiment, learn, build tools, and collaborate with teams creating AI/ML technology and services at massive scale. You will also serve as a trusted security advisor and mentor within the organization, helping to raise the security bar across multiple teams.

Key job responsibilities - Conduct security reviews and threat modeling for AI/ML products, technologies, and services, identifying risks and driving pragmatic mitigations that protect customers. - Design and validate secure architectures for AI/ML systems, balancing simplicity and extensibility while applying security engineering best practices. - Develop security tools, automation, and scripts to scale risk reduction efforts and improve the efficiency of security processes across partner teams. - Lead penetration testing engagements, create new testing methods, and collaborate with development teams to remediate findings and strengthen the overall security posture. - Contribute to security guidance, documentation, and training to help internal teams build securely and consistently.

A day in the life You might start your morning reviewing a threat model for a new AI/ML service feature, then jump into a code review with a partner development team to assess authentication and data flow security. After lunch, you could be writing a Python script to automate a recurring security check or leading a penetration test against a recently deployed application. You will regularly connect with engineers across multiple teams, sharing findings and aligning on security priorities, while carving out time to mentor newer team members and contribute to your team's security roadmap.

About the team The Amazon AI Security team is responsible for ensuring that Amazon's AI and ML services are built and operated securely. We work closely with engineering teams across the organization to identify and reduce security risk at every stage of the development lifecycle. Our mission is to make security a natural part of how AI/ML products are built, so that customers can trust the services they rely on.

We are a collaborative group that values knowledge sharing, mentorship, and continuous learning. Whether you are deepening your expertise in cloud security architecture, generative AI, or security automation, you will find opportunities to grow alongside teammates who are equally invested in your success.

Basic Qualifications: - 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience - 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience - 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience - Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security - Knowledge of networking protocols such as HTTP, DNS and TCP/IP

Preferred Qualifications: - 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks - Experience with AWS products and services - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. As a total compensation company, Amazon's package may include other elements such as sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon offers comprehensive benefits including health insurance (medical, dental, vision, prescription, basic life & AD&D insurance), Registered Retirement Savings Plan (RRSP), Deferred Profit Sharing Plan (DPSP), paid time off, and other resources to improve health and well-being. We thank all applicants for their interest, however only those interviewed will be advised as to hiring status.

CAN, BC, Vancouver - 137,800.00 - 230,100.00 CAD annually