Content Security Engineer, GME Content Security

About the role

The Content Security team protects pre-release content across Amazon Global Media and Entertainment. This Content Security Engineer role combines hands-on production security advisory with technical execution: securing content creation workflows, researching and developing next-generation protection measures, and maintaining the cloud infrastructure and tooling that power our security mechanisms.

You will work directly with studio and production teams across the content creation lifecycle (pre-production, production, post-production, and delivery) while also driving forward-looking initiatives to address emerging threats, including those introduced by generative AI.

You will also review the tools and services internal teams build to handle pre-release content, making sure content security measures are built in from the start. This requires a deep understanding of each tool's use cases and workflow context so that controls are right-sized to the actual risk. You will use AI and automation to scale and mechanize content security operations.

Key job responsibilities

Serve as the primary content security advisor to film and series production teams, providing tailored guidance on secure workflow design: editorial environment setup, Aspera file transfer configurations, cloud storage architecture, on-set networking, and remote collaboration tools

• Assess internal and external content processing architectures (large enterprise to boutique post houses) to securely deploy and maintain content networks and equipment
• Manage security assessments of 3rd party services and tools supporting Amazon Studios, including intake of production team requests and end-to-end vendor security coordination
• Research, evaluate, and pilot next-generation content security measures such as forensic watermarking, audio/video fingerprinting, and content tracking technologies

Contribute to the team's strategy for securing pre-release content against generative AI threats, including AI-driven extraction, reconstruction, deepfake misuse, and model training on unreleased assets; translate emerging risks into actionable controls and standards

• Maintain and enhance AWS infrastructure and applications supporting Content Security operations, and build internal security tooling to automate workflows such as access governance, audit reporting, and compliance monitoring
• Write and maintain lightweight automation (Python/scripting) to support security tooling, audit workflows, and operational reporting
• Develop and iterate security standard operating procedures tailored to each studio and production team
• Mentor junior team members and contribute to the team's hiring process
• Provide regular written updates on program status, risk posture, and incident findings

Basic Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java,.Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Experience in scripting, programming, and security code reviewing in a common programming language (non-internship)
• Experience in troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience)

Preferred Qualifications

• 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• 2+ years of scripting, programming, or security code review in a common language, such as Python, Java or C++ experience
• Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
• Experience with AWS products and services
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

Additional information

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If the country/region you're applying in isn't listed, please contact your Recruiting Partner.

Pay and benefits

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave.

USA, CA, Culver City - 159,300.00 - 202,400.00 USD annually