Join Amazon’s Customer Service Security team and help reduce security risk across customer service operations at massive scale. In this Security Engineer II role (onsite in Seattle, WA), you will partner with business and engineering teams to identify security risks, design practical controls, and build scalable security frameworks for customer contact workflows used across more than 40 countries. If you enjoy turning ambiguity into concrete security requirements and enabling teams to launch securely, this is a strong fit.
Compensation: USD 159,300 - 202,400 per year. Experience: 3+ years. Education: Bachelor’s degree in a STEM field.
What you’ll do
- Lead security reviews, threat modeling, and risk assessments for customer service systems, identifying pragmatic mitigations that keep teams moving.
- Design and build security controls and engineering solutions that help protect customer data while enabling secure customer contacts at scale.
- Collaborate with business stakeholders, product owners, and engineering teams to understand emerging risks and define security strategies where none yet exist.
- Create security frameworks, runbooks, and rubrics for new problem domains so other engineers can apply consistent and repeatable security practices.
- Document security risks and design decisions clearly for both technical and non-technical audiences, and mentor other security engineers on best practices.
Requirements
- 3+ years of programming experience in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language.
- 2+ years of scripting, programming, and security code review using a common programming language (non-internship).
- 2+ years troubleshooting system issues, analyzing logs, or automating basic tasks using command line tools (non-internship).
- Bachelor’s degree in a STEM field (Science, Technology, Engineering, Mathematics), or 2+ years of IT Security experience.
- Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
- Knowledge of industry-based security vulnerabilities and remediation techniques.
Preferred qualifications
- 2+ years of any combination of: threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security.
- Experience performing security activities across one or more phases of the software development lifecycle (SDLC) (for example: security design review, threat modeling, secure code review, and security testing).
- Experience conducting insider threat investigations.
- Experience securing telephony systems against risk.
A day in the life
- Operate independently by engaging directly with business and engineering teams to uncover security risks that do not come with predefined solutions.
- On any given day, you may run threat models for new customer contact workflows, write security frameworks other teams will adopt, or review architecture proposals to ensure they meet the security bar.
- Spend significant time navigating ambiguity by translating business context into concrete security requirements and building the path forward.
- Balance proactive, roadmap-driven work with responses to emerging security concerns.
Benefits
- Health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
- 401(k) matching
- Paid time off
- Parental leave
About the team
The CS Security team is dedicated to reducing security risk across Amazon’s customer service organization. The team engineers solutions that help keep customer data secure while enabling fast, high-quality customer and associate experiences at massive scale, with work touching billions of customer contacts annually across more than 40 countries. Amazon is investing in new engineering capabilities to make every customer contact more secure, making this a meaningful time to shape what’s next.
Technologies: Python, Ruby, Go, Swift, Java, .Net, C++, HTTP, DNS, TCP/IP
Location: Seattle, WA (onsite)
