Software Development Engineer, Amazon Security Lake

Amazon Security Lake is a fully managed security data lake service that automatically centralizes security data from AWS environments, SaaS providers, on-premises sources, and third-party products into a purpose-built data lake, normalizing it to the Open Cybersecurity Schema Framework (OCSF) so customers get a single, analytics-ready view of their security posture across their entire organization. Security Lake operates across AWS commercial and GovCloud Regions and is trusted by many of the world"s largest enterprises with their most sensitive data.

We are looking for a Senior Software Development Engineer to serve as a technical leader for Security Lake and across the broader AWS Security Services organization. This role is unusual in its breadth: beyond owning the architecture and operational excellence of a security-critical, customer-facing data service, you will lead critical-path initiatives across our portfolio - including Amazon Security Hub and Amazon Inspector services. You will regularly be the senior engineer who lands in an unfamiliar codebase, earns the trust of another team"s engineers, and converts an ambiguous business problem into a shipped, production system. If you want the reach of a platform role combined with the hands-on depth of a service team, this is that job.

Key job responsibilities

• Lead the design of major deliverables end-to-end - from working backwards on ambiguous requirements, through design documents and security reviews (threat models, AppSec, operational readiness), to implementation, launch, and production operation
• Serve as a technical leader across AWS Security Services: embed with partner teams (Amazon Inspector, AWS Security Hub, AWS Config), deliver on their critical path to their standards and release calendars, and hand over cleanly with documentation, tests, canaries, and runbooks
• Own and raise the operational bar for Security Lake: root-cause high-severity issues to resolution, harden APIs and canaries, drive down recurring alarms, and keep a security-critical service healthy and efficient
• Set technical direction and simplify: promote re-use and extension over new components, pay down architectural debt, and turn one-off solutions into durable practices the whole team adopts
• Drive decisions across team boundaries - when a dependency has no fix, propose the options, build consensus among stakeholders, and unblock the launch
• Mentor and grow engineers through thorough (but kind) code and design reviews, onboarding of new team members, and raising the performance bar with every review

A day in the life

Most of your time is spent doing hands-on engineering: designing, writing, and reviewing code for distributed data-processing and control-plane systems (primarily Java and Python services with TypeScript/CDK infrastructure). In a typical week you might author a design for a new cross-service security capability and drive it through review with senior engineers from two other teams, ship code into a partner team"s codebase, dig into a production alarm and turn the root cause into a fix plus a runbook, and give design feedback that changes the direction of a teammate"s approach. You will share the team"s on-call rotation and own customer issues to resolution - customers trust this service with their security data, and operational excellence is everyone"s job, with senior engineers setting the example. The team is compact, senior-leaning, and geographically distributed, which means high autonomy, direct access to Principal Engineers and leadership across AWS Security Services, and visible ownership of everything you ship.