Content Security Engineer, GME Security

The Content Security team protects pre-release content across Amazon Global Media and Entertainment. This Content Security Engineer role combines hands-on production security advisory with technical execution: securing content creation workflows, researching and developing next-generation protection measures, and maintaining the cloud infrastructure and tooling that power our security mechanisms. You will work directly with studio and film production teams across the content creation lifecycle (pre-production, production, post-production, and delivery) while also driving forward-looking initiatives to address emerging threats, including those introduced by generative AI. You will also leverage AI and automation to scale and mechanize content security operations.

Key job responsibilities
- Serve as the primary content security advisor to film and series production teams, providing tailored guidance on secure workflow design: editorial environment setup, Aspera file transfer configurations, cloud storage architecture, on-set networking, and remote collaboration tools
- Assess internal and external content processing architectures (large enterprise to boutique post houses) to securely deploy and maintain content networks and equipment
- Manage security assessments of 3rd party services and tools supporting Amazon Studios, including intake of production team requests and end-to-end vendor security coordination
- Research, evaluate, and pilot next-generation content security measures such as forensic watermarking, audio/video fingerprinting, and content tracking technologies
- Contribute to the team's strategy for securing pre-release content against generative AI threats, including AI-driven extraction, reconstruction, deepfake misuse, and model training on unreleased assets; translate emerging risks into actionable controls and standards
- Maintain and enhance AWS infrastructure and applications supporting Content Security operations, and build internal security tooling to automate workflows such as access governance, audit reporting, and compliance monitoring
- Write and maintain lightweight automation (Python/scripting) to support security tooling, audit workflows, and operational reporting
- Develop and iterate security standard operating procedures tailored to each studio and production team
- Provide regular written updates on program status, risk posture, and incident findings

About the team
Diverse Experiences
Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.
Why Amazon Security?
At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores
Inclusive Team Culture
In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.
Training & Career Growth
We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.
Work/Life Balance
We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

BASIC QUALIFICATIONS

- 3+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
- 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
- Experience applying threat modeling or other risk identification techniques or equivalent
- Knowledge of industry-based security vulnerabilities and remediation techniques
- Knowledge of usage or integration experience with common cloud-hosted services

PREFERRED QUALIFICATIONS

- Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP
- Experience with AWS products and services
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
- CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+