Security Engineer II: Ring 0 Security & Tooling

Amazon; New York (NY); On-site; USD 159,000 - 213,000; Full time

Job summary

Amazon Security in New York seeks a Security Engineer to collaborate with software teams, building secure services and leading by influence. You’ll review code, develop security frameworks, and shape secure development practices across Ring 0 systems.

Ideal candidates combine deep technical security knowledge with strong communication skills, capable of conveying risks to both technical and non-technical audiences and guiding partners toward secure solutions.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• Bachelor's degree in a STEM field or experience in IT Security.
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP.
• Experience with troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship experience).
• Experience explaining complex technical risks in simple, clear language so that non-technical stakeholders can easily understand and take appropriate action.

Responsibilities

• Define and drive implementation of proactive security controls for SDO's most critical, Ring 0 applications.
• Evaluated and implement security controls, ensuring Ring 0 developers build secure applications by default.
• Assess and drive mitigation of security risks.
• Build and/or drive adoption of security tooling (e.g., automated threat modeling, code scanning, security test generation) to scale security across SDO AppSec.
• Drive adoption of security guardrails, testing frameworks, and monitoring across Ring 0 applications.
• Collaborate with Ring 0 builder teams to integrate security guidance into development workflows, reducing late-stage security findings.
• Develop and maintain security documentation including threat models, risk assessments, and secure development guidelines.
• Support security incident investigations related to Ring 0 systems.
• Performing manual and automated secure code review (Java, Python, JavaScript).
• Identifying and mitigating security issues at scale.
• Performing adversarial security analysis.
• Providing security guidance to internal development teams, stakeholders, and business leaders.
• Independently solving complex security problems.

Skills

Python

Threat modeling

Security communications

Networking concepts

Education

Bachelor's degree in STEM

Tools

AWS

Job description

Amazon Security in New York seeks a Security Engineer to collaborate with software teams, building secure services and leading by influence. You’ll review code, develop security frameworks, and shape secure development practices across Ring 0 systems.

Ideal candidates combine deep technical security knowledge with strong communication skills, capable of conveying risks to both technical and non-technical audiences and guiding partners toward secure solutions.