Sr. Security Engineer, AppSec - Amazon Stores Security

Location: New York, NY, onsite. Salary: USD 175,100 - 236,900 per year. Education: Bachelor's degree required. Experience: 8+ years in Application Security or Development; 4+ years non-internship in troubleshooting or automating complex tasks; 5+ years identifying security issues and developing mitigation plans.

Benefits

• Health insurance coverage including medical, dental, vision, prescription drugs, Basic Life and AD and D insurance with optional supplemental life plans, EAP, mental health support, Medical Advice Line, Flexible Spending Accounts, and Adoption and Surrogacy reimbursement
• 401(k) retirement plan with company matching
• Paid time off
• Parental leave

About the role

Senior Security Engineer focusing on AppSec for Amazon Stores, collaborating with software development teams to secure new services and safeguard customers. The role leads threat modeling, secure code reviews, and the development of security automation while guiding architecture and risk decisions.

Responsibilities

• Develop, update, and maintain threat models across diverse software projects
• Perform manual and automated secure code reviews in Java, Python, and JavaScript
• Build security automation tooling to enhance defense capabilities
• Conduct adversarial security analysis using innovative tools to complement manual efforts
• Deliver security training and outreach to internal development teams
• Provide security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence team and partner processes, priorities, and decisions to improve outcomes

Requirements

• At least 4 years of non-internship experience troubleshooting systems, analyzing logs, or automating complex tasks using command line tools
• At least 5 years identifying security issues and risks and developing mitigation plans
• At least 4 years of non-internship scripting, programming, and security code review in common languages
• Proficiency in at least two of Scala, Java, Python, C/C++, or Go
• Hands-on experience identifying industry security vulnerabilities, attack patterns, and remediation techniques
• Bachelor's degree required
• Experience applying threat modeling or equivalent risk identification techniques
• Broad and deep knowledge across application security domains
• 8+ years of Application Security or Development experience

Technologies

• Java
• Python
• JavaScript
• Scala
• C/C++
• Go