Software Dev Engineer Ii, Customer Service Security

Amazon Amazon · Big Tech · Seattle, WA · Software Development

Software Development Engineer II on the Customer Service Application Security team at Amazon. This role focuses on building innovative security solutions using Generative AI and LLMs to automate security processes, improve security posture, and increase developer productivity. The engineer will architect and develop native AWS solutions, including prompt engineering, security frameworks, and threat detection mechanisms, to create paved path solutions for developers.

What you'd actually do

  1. Architect and develop innovative security automation tools that leverage Generative AI technologies to streamline security processes, enabling efficient and scalable security operations.
  2. Collaborate closely with security engineers and software development teams to understand their needs, provide guidance on secure coding practices, and advocate for security best practices throughout the development lifecycle.
  3. Conduct code reviews, identify potential vulnerabilities, and propose mitigation strategies to enhance the overall security posture.
  4. Stay up-to-date with the latest software development and security trends, techniques, and industry best practices in Generative AI and application security, and drive their adoption within the organization.
  5. Design and implement preventive and detective security systems that enable developers to ship secure code continuously.

Skills

Required

  • 3+ years of non-internship professional software development experience
  • 2+ years of non-internship design or architecture (design patterns, reliability and scaling) of new and existing systems experience
  • Experience programming with at least one software programming language
  • Experience developing, deploying and managing AI products at scale

Nice to have

  • 3+ years of full software development lifecycle experience
  • Experience with AWS
  • Experience with Generative AI technologies
  • Experience with LLMs
  • Experience with prompt engineering
  • Experience with security frameworks
  • Experience with application security controls
  • Experience with threat detection mechanisms

What the JD emphasized

  • build reusable security libraries, tools, and frameworks that serve as paved paths
  • make security invisible
  • make the secure path the easy path for developers

Other signals

  • Generative AI
  • LLMs
  • prompt engineering
  • security automation
  • application security