Software Development Engineer, AWS Vulnerability Management

Amazon Web Services (AWS) is seeking a Software Development Engineer for their Vulnerability Management team. In this role, you will design and build innovative tooling and GenAI-powered solutions to enhance security control and risk management across AWS products, collaborating closely with various stakeholders to simplify risk measurement and compliance.

Responsibilities:

• Design and build scalable tools and platforms that automate the collection, validation, and attestation of security control and fleet data
• Develop systems that enable security teams to investigate and contextualize vulnerability risks across all AWS products and services
• Create APIs and integrations that connect compliance, risk, and attestation systems with audit workflows
• Build self-service capabilities that empower teams to efficiently respond to audit and regulatory requests
• Implement GenAI-powered features to accelerate evidence gathering, risk analysis, and compliance documentation
• Develop intelligent systems that help articulate and communicate risk context to diverse audiences
• Create automated report generation capabilities that translate technical security data into audit-ready attestations
• Leverage LLMs and machine learning to improve risk prioritization and decision-making
• Partner closely with Security Assurance and Proactive Security teams to understand requirements and deliver solutions that simplify risk measurement
• Work with security engineers to understand their workflows and build tools that enhance their effectiveness
• Collaborate with audit and compliance stakeholders to ensure tooling meets regulatory and attestation standards
• Contribute to the technical direction of compliance and attestation systems across AWS
• Demonstrate both depth and breadth in your technical knowledge, from low-level systems to high-level architecture
• Build robust, maintainable code that meets the highest standards for security and reliability
• Define and track metrics and KPIs to measure the effectiveness and adoption of your tools
• Participate in technical design reviews and contribute thought leadership on compliance automation

Requirements:

• 5+ years of non-internship professional software development experience
• 5+ years of programming with at least one software programming language experience
• 5+ years of leading design or architecture (design patterns, reliability and scaling) of new and existing systems experience
• Experience as a mentor, tech lead or leading an engineering team
• 5+ years of full software development life cycle, including coding standards, code reviews, source control management, build processes, testing, and operations experience
• Bachelor's degree in computer science or equivalent