Security Engineer II - Remote & Flexible Hours

Amazon; Town of Texas (WI); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon Stores is seeking a Security Engineer to collaborate with software teams, inspecting code for security, building frameworks, and aligning with secure design practices. You will lead threat modeling, perform security reviews, and help scale security across diverse projects.

The role emphasizes communicating risk to both technical and non-technical audiences, developing automation, and influencing teams to adopt secure practices within cloud and retail environments.

Qualifications

• Experience across SDLC security activities (design review, threat modeling, secure code review, testing).
• Bachelor's degree in CS or 3+ years of IT security experience.
• Experience with network architecture and AWS.
• Proficiency in programming languages (Java, Python, etc.).
• Ability to explain technical risks to non-technical stakeholders.

Responsibilities

• Create, update, and maintain threat models for software projects.
• Conduct first-party application security research.
• Perform manual and automated secure code reviews in Java, Python, JavaScript.
• Identify and mitigate security issues at scale.
• Develop security automation tools.
• Perform adversarial security analysis using innovative tools.
• Provide security guidance to internal software teams to secure apps.
• Independently solve security problems requiring novel methods.
• Influence team processes and priorities to improve outcomes.

Skills

Threat modeling

Secure code review

Security testing

SDLC security

Network architecture

AWS

Programming languages

Communication

Education

Bachelor's degree in CS or equivalent

Tools

AWS services

Job description

Amazon Stores is seeking a Security Engineer to collaborate with software teams, inspecting code for security, building frameworks, and aligning with secure design practices. You will lead threat modeling, perform security reviews, and help scale security across diverse projects.

The role emphasizes communicating risk to both technical and non-technical audiences, developing automation, and influencing teams to adopt secure practices within cloud and retail environments.