Security Engineer II — Store Security & Secure Coding

Amazon; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Job summary

Amazon.com Services LLC is seeking a Security Engineer to collaborate with software teams, review code for security issues, and develop automation to improve secure development across services. You will lead threat modeling and provide architecture guidance while communicating risks clearly to technical and non-technical audiences.

Join the Stores AppSec organization to drive security innovations, reduce on-call time, and support the widest arrays of technology across Amazon’s core services.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a non-internship role
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship)

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript
• Development of security automation tools
• Adversarial security analysis using modern tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes

Skills

Python

Java

JavaScript

Go

C++

.Net

Ruby

Security code review

Threat modeling

Scripting

Education

Bachelor's degree in computer science or equivalent

Tools

AWS

Job description

Amazon.com Services LLC is seeking a Security Engineer to collaborate with software teams, review code for security issues, and develop automation to improve secure development across services. You will lead threat modeling and provide architecture guidance while communicating risks clearly to technical and non-technical audiences.

Join the Stores AppSec organization to drive security innovations, reduce on-call time, and support the widest arrays of technology across Amazon’s core services.