Security Engineer II, Customer Service Security

Amazon.com Services LLC; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Health insurance

Mental health support

Flexible Spending Accounts

Adoption reimbursement

401(k) matching

Paid time off

Parental leave

Job summary

Amazon’s Customer Service Security team is seeking a Security Engineer II to spot risks, design practical controls, and build scalable security frameworks for customer service operations. Location is Seattle, onsite, with a compensation range of USD 159,300 - 202,400 yearly.

You will lead reviews, design controls, and mentor engineers while partnering with product and engineering teams to secure customer contacts at scale across 40+ countries.

Qualifications

• Bachelor’s degree in a STEM field or 2+ years IT Security experience.
• 3+ years of OO programming in Python, Ruby, Go, Swift, Java, .NET, or C++.
• 2+ years of scripting and security code review.
• 2+ years troubleshooting systems, analyzing logs, or automating tasks.
• Knowledge of HTTP, DNS, TCP/IP networking.
• Knowledge of security vulnerabilities and remediation techniques.

Responsibilities

• Lead security reviews, threat modeling, and risk assessments for customer service systems.
• Design and build security controls and engineering solutions that protect customer data.
• Partner with stakeholders to define security strategies for new domains.
• Create security frameworks, runbooks, and rubrics for new problem domains.
• Communicate risk and design decisions clearly; mentor other security engineers.

Skills

Python

Ruby

Go

Swift

Java

.NET

C++

Networking

Security reviews

Threat modeling

Education

Bachelor's in STEM

Job description

Amazon’s Customer Service Security team helps keep customer data protected while enabling fast, high-quality customer and associate experiences at massive scale. As a Security Engineer II, you will work alongside business and engineering teams to spot security risks, design practical controls, and build scalable security frameworks for customer service operations. This is a hands-on security engineering role focused on reducing security risk across customer contacts globally, supporting billions of interactions each year across more than 40 countries.

Location: Seattle, WA (onsite)
Compensation: USD 159,300 - 202,400 per yearly

What you’ll get

• Health insurance including medical, dental, vision, prescription coverage, Basic Life & AD&D insurance, and options for Supplemental life plans
• Employee resources including EAP and Mental Health Support, plus a Medical Advice Line
• Flexible Spending Accounts and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Responsibilities

• Lead security reviews, threat modeling, and risk assessments for customer service systems, using pragmatic approaches that help teams launch securely.
• Design and build security controls and engineering solutions that protect customer data and support secure customer contacts at scale.
• Partner with business stakeholders, product owners, and engineering teams to understand emerging risks and define security strategies where none exist yet.
• Create security frameworks, runbooks, and rubrics for new problem domains so other engineers can apply consistent, repeatable security practices.
• Communicate security risk and design decisions clearly in writing to both technical and non-technical audiences, and mentor other security engineers on best practices.

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship).
• 2+ years of troubleshooting system issues, analyzing logs, or automating basic tasks using command line tools (non-internship).
• Bachelor’s degree in a STEM field, or 2+ years of IT Security experience.
• Knowledge of networking protocols including HTTP, DNS, and TCP/IP.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Preferred qualifications

• 2+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security.
• Experience performing security activities across one or more phases of the SDLC, such as security design review, threat modeling, secure code review, and security testing.
• Experience conducting insider threat investigations.
• Experience securing telephony systems against risk.

A day in the life

• Work independently while engaging directly with business and engineering teams to uncover security risks that do not come with predefined solutions.
• Conduct threat models for new customer contact workflows, write security frameworks that other teams will adopt, and review architecture proposals against the security bar.
• Translate business context into concrete security requirements while building the path forward in ambiguous problem spaces.
• Balance proactive roadmap-driven work with responding to emerging security concerns as they arise.

Core technologies

Python, Ruby, Go, Swift, Java, .Net, C++, HTTP, DNS, TCP/IP

About the team

The CS Security team is focused on reducing security risk across Amazon’s customer service organization. Their work helps keep customer data secure while enabling fast, high-quality customer and associate experiences at massive scale. The team engineers solutions that protect billions of customer contacts annually across more than 40 countries, and they are investing in new engineering capabilities to improve the security of every customer contact.