Security Engineer II, CLS Application Security

Amazon; Irvine (CA); Sur place; USD 159 000 - 202 000; Plein temps

Résumé du poste

Amazon Security is hiring to embed security early in the development lifecycle and partner with builder teams to ship secure software at scale. You will own strategic security projects end to end, building automated tooling and guiding teams toward secure-by-default architectures.

You will collaborate across operations and grocery businesses, mentor engineers, and help prevent vulnerabilities before they reach production through scalable security controls and proactive risk management.

Qualifications

• 2+ years of scripting, programming, and security code review in a non-internship role.
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing.
• Experience owning and leading significant projects from concept to deployment.
• Experience communicating security risk to technical and non-technical stakeholders in writing.
• 3+ years of application security engineering (security design reviews, threat modeling, code-level analysis).
• Experience carrying a builder-facing security consult load (intake, triage, guidance, resolution tracking).

Responsabilités

• Lead a strategic security initiative end to end — scoping, design, implementation, testing, deployment, and maintenance.
• Build security automation and AI-powered tooling that scales beyond one-off reviews; prevention rules and secure defaults.
• Review architecture and designs, lead security design reviews and steer builders toward secure-by-default solutions.
• Consult with development teams, resolving findings and giving fast, actionable guidance.
• Centralize controls so many teams can adopt one solution, reusing existing ones where possible.
• Investigate high-impact risks, identify patterns, and fix root causes with reproducible mechanisms.
• Communicate risk and recommendations clearly to engineers and stakeholders, advocating for the right outcome.
• Coach and mentor teammates to raise security standards and value.

Connaissances

Security coding

Penetration testing

Project ownership

Security communication

AppSec engineering

Security consulting

Outils

AWS IAM

VPC

KMS

CloudTrail

CI/CD security

Description du poste

Description

Love the idea of stopping security problems before they ever reach production — at a scale most engineers never get to touch? Come build automation and AI-powered tooling that protects the software behind Amazon's fulfillment, delivery, and grocery operations.

We're a security team that cares about work-life harmony and meaningful work, and we invent novel ways to reduce risk at scale. You'll embed security early in the development lifecycle, partner directly with builder teams, and own a strategic project end to end while helping builders ship secure software faster. If you'd rather build a mechanism that prevents a whole class of vulnerabilities than review the same issue twice, you'll fit right in here.

Key job responsibilities

• Lead a strategic security initiative end to end — scoping, design, implementation, testing, deployment, and maintenance — while guiding other engineers along the way.

• Build security automation and AI-powered tooling that scales beyond one-off reviews: prevention rules, secure defaults, and paved paths that stop vulnerabilities before they reach production.

• Review application architecture and designs, leading security design reviews and steering builders toward secure-by-default solutions.

• Consult directly with development teams, resolving findings and giving fast, actionable guidance that meets or exceeds the security bar.

• Find opportunities to centralize controls so many teams can adopt one solution instead of each building their own, reusing what already exists wherever possible.

• Dig into ambiguous, high-impact risks, spot patterns across a large application footprint, and fix root causes with reproducible mechanisms that are simple, maintainable, and built to last.

• Communicate risk and recommendations clearly to engineers, partner security teams, and business stakeholders, and speak up for the right outcome even when it isn't the popular one.

• Coach and mentor teammates to raise the bar on how the team works and the value it delivers.

A day in the life

Most days you'll split your time between the strategic project you own and the builders who need you. You might start by advancing your project — designing a piece of automation or AI tooling — then jump into a design review to help a team ship securely, or dig into a tricky consult where the right answer isn't obvious. You'll partner closely with development teams across our operations and grocery businesses, and with other security teams whose work connects to yours. When an urgent security issue comes up, you'll help contain it and make sure the fix sticks.

About the team

We embed security early in the development lifecycle, meeting builders where they are so issues get caught before they reach production. Our vision is a world where security is built in: guidance shows up right when builders need it, automation catches preventable issues, and our people focus on the risks that truly need human judgment. We live by a few tenets — automate to scale and save human expertise for judgment, design security in rather than bolt it on, prevent instead of react, and earn builder trust through clarity. We care about meaningful work and work-life harmony, and we have fun inventing.

Diverse Experiences

Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying.

Why Amazon Security?

At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Inclusive Team Culture

In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices.

Training & Career Growth

We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional.

Work/Life Balance

We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve.

Basic Qualifications

• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience

• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and the development of exploits or equivalent

• Experience owning and leading significant projects from concept to deployment

• Experience communicating security risk to technical and non-technical stakeholders in writing

• 3+ years of application security engineering experience (security design reviews, threat modeling, code-level vulnerability analysis)

• Experience carrying a builder-facing security consult load (intake, triage, guidance, resolution tracking)

Preferred Qualifications

• Experience in a logistics/operations environment

• Experience in root cause analysis and error correction, identifying changes to procedures and systems to implement long-term fixes and avoid repeating issues

• Experience in mentoring, leading, or managing more junior engineers

• Experience with cloud security in AWS (IAM, VPC, KMS, CloudTrail, or equivalent services)

• Experience building automated security controls or shifting security left in CI/CD pipelines

Amazon is an equal opportunity employer and does not discriminate on the basis of protected veteran status, disability, or other legally protected status.

Los Angeles County applicants: Job duties for this position include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully with employees, supervisors, and staff to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies. Criminal history may have a direct, adverse, and negative relationship with some of the material job duties of this position. These include the duties and responsibilities listed above, as well as the abilities to adhere to company policies, exercise sound judgment, effectively manage stress and work safely and respectfully with others, exhibit trustworthiness and professionalism, and safeguard business operations and the Company’s reputation. Pursuant to the Los Angeles County Fair Chance Ordinance, we will consider for employment qualified applicants with arrest and conviction records.

Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.

The base salary range for this position is listed below. Your Amazon package will include sign-on payments and restricted stock units (RSUs). Final compensation will be determined based on factors including experience, qualifications, and location. Amazon also offers comprehensive benefits including health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage), 401(k) matching, paid time off, and parental leave. Learn more about our benefits at https://amazon.jobs/en/benefits .

USA, CA, Irvine - 159,300.00 - 202,400.00 USD annually