AppSec Security Engineer II: Risk & Prevention

Amazon; Austin (TX); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon seeks a Security Engineer to join the AppSec organization and advance AppRank, a critical initiative to identify Amazon's most critical applications and criteria. You will engineer scalable security solutions across development lifecycles.

The role emphasizes automation, risk analysis, and collaboration with software teams to embed preventative controls and secure design practices at scale.

Qualifications

• 3+ years of programming in Python or similar OO language
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools
• Knowledge of industry-based security vulnerabilities and remediation techniques
• Experience scripting, programming, and security code reviewing in a common programming language
• 4+ years of any combination of the following: application security frameworks, identity/access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing
• Knowledge of access-control systems, network security, and security architecture concepts
• Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or equivalent work experience

Responsibilities

• Engineer AI-driven solutions to assess and classify security findings across business units
• Identify root causes of recurring vulnerabilities and develop systemic remediation strategies
• Design and build internal tools to analyze patterns in security findings and prevent recurrence
• Collaborate with application teams to implement preventative security controls earlier in the development lifecycle (Shift-Left)
• Develop automated workflows to integrate security insights into developer pipelines
• Perform targeted code reviews and static/dynamic analysis to validate findings and guide mitigations
• Contribute to security dashboards and metrics for visibility into finding trends and remediation velocity
• Partner with security leadership and engineering stakeholders to define and prioritize high-impact prevention efforts
• Investigate and eradicate classes of vulnerabilities through scalable solutions
• Guide teams through remediations by providing technical mentorship and secure design best practices
• Maintain deep awareness of emerging threats and adapt tooling and processes to address them

Skills

Python

Troubleshooting

Security concepts

Code review

Threat modeling

AWS basics

Education

Bachelor's degree in CS/CE/EE

Tools

AWS

Job description

Amazon seeks a Security Engineer to join the AppSec organization and advance AppRank, a critical initiative to identify Amazon's most critical applications and criteria. You will engineer scalable security solutions across development lifecycles.

The role emphasizes automation, risk analysis, and collaboration with software teams to embed preventative controls and secure design practices at scale.