Within Amazon's Stores division, the Security Engineer II in Stores Application Security partners with software development teams to identify and remediate security risks while helping design secure services. The role emphasizes threat modeling, secure code reviews, and building security automation to scale protection across store-related applications.
Responsibilities
- Developing and maintaining threat models for a broad range of software projects
- Carrying out internal application security research
- Leading manual and automated secure code reviews, primarily in Java, Python, and JavaScript
- Identifying and mitigating security issues at scale across initiatives
- Building security automation tools to streamline protections
- Using innovative tooling to perform adversarial security analysis that augments manual efforts
- Providing security guidance to internal development teams to secure their applications
- Independently solving security problems that require novel methods or approaches
- Influencing team and partner processes, priorities, and choices to improve security outcomes
Requirements
- Experience performing security activities across one or more SDLC phases, including security design reviews, threat modeling, secure code review, and security testing
- Bachelor's degree in computer science or equivalent, or 3+ years of IT security experience
- Experience with network architecture, enterprise IT systems, and cloud environments such as AWS
- Proficiency in programming or scripting languages (e.g., Java, Python, Perl, Bash, Ruby, PowerShell, etc.)
- Ability to explain complex technical risks in clear terms so that non-technical stakeholders can understand and act
Technologies
- Java
- Python
- JavaScript
- Perl
- Bash
- Ruby
- PowerShell
- AWS
Benefits
- Health insurance including medical, dental, vision, prescription coverage, Basic Life and AD&D, with options for supplemental life plans, EAP, mental health support, Medical Advice Line, Flexible Spending Accounts, and adoption or surrogacy reimbursement
- 401(k) with matching
- Paid time off
- Parental leave
About the Team
Diverse Experiences: Amazon Security values a wide range of experiences. If you do not meet every listed qualification, you are encouraged to apply. Whether you are starting your career or following an unconventional path, your background can contribute to the team.
Why Amazon Security
Security is central to maintaining customer trust and delivering excellent experiences. This organization sets a high standard for security across all Amazon products and services and offers security professionals opportunities to grow across areas like cloud, devices, retail, entertainment, healthcare, operations, and physical stores.
Work/Life Balance
Flexibility matters. The culture supports flexible work hours and arrangements to help maintain harmony between professional and personal commitments, enabling sustained performance.
Inclusive Team Culture
Curiosity and continuous learning define Amazon Security. Ongoing DEI events and learning opportunities help staff embrace diverse ideas, perspectives, and voices while tackling security challenges.
Mentorship and Career Growth
The team emphasizes ongoing knowledge-sharing, training, and career development resources aimed at helping security professionals grow into well-rounded experts.
