Security Engineer II — AI-Driven App Security

Amazon Inc.; Irvine (CA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

401(k) matching

Paid time off

Parental leave

Job summary

Amazon Security is seeking a Security Engineer II to embed security early in the development lifecycle, leading strategic initiatives from design to deployment and partnering with builder teams to ship secure software at scale.

You will build automated security controls and AI-powered tooling, review architectures, mentor teammates, and help centralize controls across Amazon's vast software footprint, ensuring risk is managed while maintaining velocity.

Qualifications

• 2+ years of scripting, programming, and security code review in a non-internship setting.
• Knowledge of system security vulnerabilities and remediation techniques including penetration testing and exploit development.
• Experience owning and leading significant projects from concept to deployment.
• Ability to communicate security risk to technical and non-technical stakeholders in writing.
• 3+ years of application security engineering experience (security design reviews, threat modeling, code-level vulnerability analysis).
• Experience carrying a builder-facing security consult load (intake, triage, guidance, resolution tracking).

Responsibilities

• Lead a strategic security initiative end to end — scoping, design, implementation, testing, deployment, and maintenance — while guiding other engineers along the way.
• Build security automation and AI-powered tooling that scales beyond one-off reviews: prevention rules, secure defaults, and paved paths that stop vulnerabilities before they reach production.
• Review application architecture and designs, leading security design reviews and steering builders toward secure-by-default solutions.
• Consult directly with development teams, resolving findings and giving fast, actionable guidance that meets or exceeds the security bar.
• Find opportunities to centralize controls so many teams can adopt one solution instead of each building their own, reusing what already exists wherever possible.
• Dig into ambiguous, high-impact risks, spot patterns across a large application footprint, and fix root causes with reproducible mechanisms that are simple, maintainable, and built to last.
• Communicate risk and recommendations clearly to engineers, partner security teams, and business stakeholders, and speak up for the right outcome even when it isn't the popular one.
• Coach and mentor teammates to raise the bar on how the team works and the value it delivers.

Skills

Security automation

AI tooling

Security design reviews

Threat modeling

Cloud security AWS

Security leadership

Communication with engineers

Tools

AWS

IAM

VPC

KMS

CloudTrail

Job description

Amazon Security is seeking a Security Engineer II to embed security early in the development lifecycle, leading strategic initiatives from design to deployment and partnering with builder teams to ship secure software at scale.

You will build automated security controls and AI-powered tooling, review architectures, mentor teammates, and help centralize controls across Amazon's vast software footprint, ensuring risk is managed while maintaining velocity.