Security Engineer II, Stores Application Security

The Security Engineer II in Stores Application Security collaborates with software development teams to identify and remediate security risks and to design secure services across Amazon Stores. The role emphasizes threat modeling, secure code review, and the development of security automation.

Responsibilities

• Create, update, and maintain threat models for a wide variety of software projects
• Conduct first party application security research
• Perform manual and automated secure code reviews, primarily in Java, Python, and JavaScript
• Identify and mitigate security issues at scale
• Develop security automation tools
• Perform adversarial security analysis using innovative tools to augment manual effort
• Provide security guidance and work with internal software development teams to secure their applications
• Independently solve security problems that require novel methods or approaches
• Influence your team's and partners' processes, priorities, and choices to improve outcomes

Requirements

• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
• Bachelor's degree in computer science or equivalent, or 3+ years of IT Security experience
• Experience with network architecture, enterprise IT systems and cloud such as AWS
• Proficiency in programming or scripting languages (e.g., Java, Python, Perl, Bash, Ruby, PowerShell, etc.)
• Experience with explaining complex technical risks in simple, clear language so that non-technical stakeholders can easily understand and take appropriate action

Technologies

• Java
• Python
• JavaScript
• Perl
• Bash
• Ruby
• PowerShell
• AWS

Benefits

• Health insurance including medical, dental, vision, prescription, Basic Life and AD&D insurance with optional supplemental life plans, EAP, mental health support, medical advice line, flexible spending accounts, and adoption and surrogacy reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

About the Team

Amazon Security values diverse experiences. We encourage candidates to apply even if you do not meet every qualification. If your career is just starting, has followed a nontraditional path, or includes alternative experiences, consider applying.

Why Amazon Security

Security is central to maintaining customer trust and delivering excellent experiences. The organization aims to uphold a high security bar across all products and services and offers opportunities to build expertise across cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Work-Life Balance

Amazon Security supports flexible work hours and arrangements to help colleagues maintain work-life harmony. A balanced approach is valued to enable sustained performance and growth.

Inclusive Team Culture

Learning and curiosity drive the security team. Ongoing DEI events and learning experiences encourage continued growth and the celebration of diverse ideas, perspectives, and voices when tackling security challenges.

Mentorship and Career Growth

The organization emphasizes continuous performance improvement and offers knowledge sharing, training, and career development resources to help professionals advance and broaden their expertise within the security field.