AppSec Automation Engineer II — AI-Driven Security

Amazon; Irvine (CA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Security is hiring to embed security early in the development lifecycle and partner with builder teams to ship secure software at scale. You will own strategic security projects end to end, building automated tooling and guiding teams toward secure-by-default architectures.

You will collaborate across operations and grocery businesses, mentor engineers, and help prevent vulnerabilities before they reach production through scalable security controls and proactive risk management.

Qualifications

• 2+ years of scripting, programming, and security code review in a non-internship role.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing.
• Experience owning and leading significant projects from concept to deployment.
• Experience communicating security risk to technical and non-technical stakeholders in writing.
• 3+ years of application security engineering (security design reviews, threat modeling, code-level analysis).
• Experience carrying a builder-facing security consult load (intake, triage, guidance, resolution tracking).

Responsibilities

• Lead a strategic security initiative end to end — scoping, design, implementation, testing, deployment, and maintenance.
• Build security automation and AI-powered tooling that scales beyond one-off reviews; prevention rules and secure defaults.
• Review architecture and designs, lead security design reviews and steer builders toward secure-by-default solutions.
• Consult with development teams, resolving findings and giving fast, actionable guidance.
• Centralize controls so many teams can adopt one solution, reusing existing ones where possible.
• Investigate high-impact risks, identify patterns, and fix root causes with reproducible mechanisms.
• Communicate risk and recommendations clearly to engineers and stakeholders, advocating for the right outcome.
• Coach and mentor teammates to raise security standards and value.

Skills

Security coding

Penetration testing

Project ownership

Security communication

AppSec engineering

Security consulting

Tools

AWS IAM

VPC

KMS

CloudTrail

CI/CD security

Job description

Amazon Security is hiring to embed security early in the development lifecycle and partner with builder teams to ship secure software at scale. You will own strategic security projects end to end, building automated tooling and guiding teams toward secure-by-default architectures.

You will collaborate across operations and grocery businesses, mentor engineers, and help prevent vulnerabilities before they reach production through scalable security controls and proactive risk management.