AppSec Security Engineer II — Threat Modeling & Code Review

Amazon Inc.; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Stores Security is seeking a Security Engineer II to collaborate with software teams, inspect code for security issues, and build secure frameworks. You will help design secure services and guide developers toward secure solutions in a fast-paced environment from Seattle.

The role emphasizes risk articulation, influencing priorities, and a strong ability to communicate with both technical and non-technical audiences. This is a security generalist role with deep expertise areas.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience.
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience.
• Bachelor's degree in computer science or equivalent.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects.
• Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript.
• Development of security automation tools.
• Adversarial security analysis using modern tools to augment manual effort.
• Security training and outreach for internal development teams.
• Security architecture and design guidance.
• Independently solve security problems that require novel methods or approaches.
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes.

Skills

Python/Java/Go

Scripting

Security review

Networking basics

Threat modeling

AWS knowledge

Education

Bachelor's degree in Computer Science

Tools

AWS

Job description

Amazon Stores Security is seeking a Security Engineer II to collaborate with software teams, inspect code for security issues, and build secure frameworks. You will help design secure services and guide developers toward secure solutions in a fast-paced environment from Seattle.

The role emphasizes risk articulation, influencing priorities, and a strong ability to communicate with both technical and non-technical audiences. This is a security generalist role with deep expertise areas.