Content Security Engineer

Who you are

• 3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Experience applying threat modeling or other risk identification techniques or equivalent
• Knowledge of industry-based security vulnerabilities and remediation techniques
• Knowledge of usage or integration experience with common cloud-hosted services
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
• Experience with AWS products and services
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
• CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+
• Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying

What the job involves

• The Content Security team protects pre-release content across Amazon Global Media and Entertainment
• This Content Security Engineer role combines hands-on production security advisory with technical execution: securing content creation workflows, researching and developing next-generation protection measures, and maintaining the cloud infrastructure and tooling that power our security mechanisms
• You will work directly with studio and film production teams across the content creation lifecycle (pre-production, production, post-production, and delivery) while also driving forward-looking initiatives to address emerging threats, including those introduced by generative AI
• You will also leverage AI and automation to scale and mechanize content security operations
• Serve as the primary content security advisor to film and series production teams, providing tailored guidance on secure workflow design: editorial environment setup, Aspera file transfer configurations, cloud storage architecture, on-set networking, and remote collaboration tools
• Assess internal and external content processing architectures (large enterprise to boutique post houses) to securely deploy and maintain content networks and equipment
• Manage security assessments of 3rd party services and tools supporting Amazon Studios, including intake of production team requests and end-to-end vendor security coordination
• Research, evaluate, and pilot next-generation content security measures such as forensic watermarking, audio/video fingerprinting, and content tracking technologies
• Contribute to the team's strategy for securing pre-release content against generative AI threats, including AI-driven extraction, reconstruction, deepfake misuse, and model training on unreleased assets; translate emerging risks into actionable controls and standards
• Maintain and enhance AWS infrastructure and applications supporting Content Security operations, and build internal security tooling to automate workflows such as access governance, audit reporting, and compliance monitoring
• Write and maintain lightweight automation (Python/scripting) to support security tooling, audit workflows, and operational reporting
• Develop and iterate security standard operating procedures tailored to each studio and production team
• Provide regular written updates on program status, risk posture, and incident findings