SecEng III, AppSec

Cybersecurity Jobs; Seattle (WA); On-site; USD 178,000 - 227,000; Full time

Benefits offered by this job

Sign-on payments and RSUs

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Stores is focused on keeping customers safe while shipping secure, reliable software at scale. In this role, you will work alongside software development teams to improve safety through secure code reviews, threat modeling, security automation, and clear security guidance.

The team emphasizes inclusive culture, continuous learning, and work-life harmony. This Seattle, WA onsite role offers a salary range of USD 178,400 - 226,700 per year and opportunities to influence security across

Qualifications

• 5+ years of work identifying security issues and risks and developing mitigation plans.
• 4+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools.
• 4+ years of non-internship scripting, programming, and security code review in common programming languages.
• Knowledge of at least two of the following: Scala, Java, Python, C/C++, or Go.
• Non-internship experience identifying industry security vulnerabilities, attack patterns, and remediation techniques.
• 4+ years experience in any combination of: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing.
• Experience with security in service-oriented architectures/microservices and web services.

Responsibilities

• Create, update, and maintain threat models across a wide range of software projects.
• Conduct manual and automated secure code reviews, with primary focus on Java, Python, and JavaScript.
• Build security automation tools that reduce security friction for development teams.
• Perform adversarial security analysis using innovative tools to strengthen and augment manual efforts.
• Provide security training and outreach to internal development teams.
• Deliver security architecture and design guidance to support safer engineering choices.
• Independently solve security problems that call for novel methods or approaches.
• Influence team and partner process, priorities, and decisions to improve outcomes.

Skills

Threat modeling

Secure code review

Security automation

Adversarial security

Security training

Security architecture

Problem solving

Tools

Java

Python

JavaScript

Scala

C/C++

Go

Job description

Amazon Stores is focused on keeping customers safe while shipping secure, reliable software at scale. In this role, you will work alongside software development teams to improve safety through secure code reviews, threat modeling, security automation, and clear security guidance. The team emphasizes inclusive culture, continuous learning, and work-life harmony.

How you’ll help keep customers safe

• Create, update, and maintain threat models across a wide range of software projects
• Conduct manual and automated secure code reviews, with primary focus on Java, Python, and JavaScript
• Build security automation tools that reduce security friction for development teams
• Perform adversarial security analysis using innovative tools to strengthen and augment manual efforts
• Provide security training and outreach to internal development teams
• Deliver security architecture and design guidance to support safer engineering choices
• Independently solve security problems that call for novel methods or approaches
• Influence team and partner process, priorities, and decisions to improve outcomes

What you’ll bring

• 5+ years of work identifying security issues and risks and developing mitigation plans
• 4+ years of non-internship experience troubleshooting systems issues, analyzing logs, or automating complex tasks using command line tools
• 4+ years of non-internship scripting, programming, and security code review in common programming languages
• Knowledge of at least two of the following: Scala, Java, Python, C/C++, or Go
• Non-internship experience identifying industry security vulnerabilities, attack patterns, and remediation techniques
• 4+ years experience in any combination of: application security frameworks, identity and access controls, incident response, mobile security, cloud computing and security, AI security, threat intelligence, and penetration testing
• Experience with security in service-oriented architectures/microservices and web services

Compensation and location

Seattle, WA (onsite). Salary range: USD 178,400 - 226,700 per year.

Benefits

• Sign-on payments and restricted stock units (RSUs)
• Health insurance: medical, dental, vision, prescription
• Basic Life & AD&D insurance and option for Supplemental life plans
• EAP
• Mental Health Support
• Medical Advice Line
• Flexible Spending Accounts
• Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Team culture

Amazon Security values diverse experiences and encourages candidates to apply even if they do not meet every listed qualification. The team supports learning and curiosity through training and career growth, and prioritizes work-life harmony through investments in work-life balance.