Remote Security Engineer II: Threat Modeling & Secure Coding

Amazon; Washington (IN); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Job summary

Amazon Security is seeking a Security Engineer to collaborate with development teams to keep customers safe while building new services. You will inspect code for security issues, create frameworks to secure development, and fine-tune designs for new services with software engineers.

The ideal candidate blends technical strength with influence and clear communication, capable of articulating risks to both technical and non-technical audiences and guiding partners toward secure solutions.

Qualifications

• Experience performing security activities across one or more phases of the SDLC (design review, threat modeling, secure code review, security testing).
• Bachelor's degree in computer science or equivalent, or 3+ years of IT Security experience.
• Experience with network architecture, enterprise IT systems and cloud such as AWS.

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects.
• Conducting first-party application security research.
• Performing manual and automated secure code review, primarily in Java, Python, and JavaScript.
• Identifying and mitigating security issues at scale.
• Developing security automation tools.
• Performing adversarial security analysis using innovative tools to augment manual effort.
• Providing security guidance and working with internal software development teams to secure their applications.
• Independently solving security problems that require novel methods or approaches.
• Influencing your team's and partners' processes, priorities, and choices to improve outcomes.

Skills

Threat modeling

Security research

Secure code review

Security automation

Adversarial security analysis

Security guidance

Influencing processes

Independent problem solving

Education

Bachelor's degree in CS or equivalent

3+ years IT Security experience

Tools

Java

Python

JavaScript

Job description

Amazon Security is seeking a Security Engineer to collaborate with development teams to keep customers safe while building new services. You will inspect code for security issues, create frameworks to secure development, and fine-tune designs for new services with software engineers.

The ideal candidate blends technical strength with influence and clear communication, capable of articulating risks to both technical and non-technical audiences and guiding partners toward secure solutions.