Security Engineer II, Stores Application Security

Amazon; New York (NY); On-site; USD 136,000 - 213,000; Full time

Job summary

Join a leading technology company as a Security Engineer II, where you'll collaborate with development teams to enhance security across various services. Your role will involve threat modeling, secure coding practices, and influencing security processes. Enjoy a culture that values diversity and work-life balance while contributing to innovative security solutions.

Benefits

Medical Benefits

Financial Support

Work-Life Balance

Qualifications

• 3+ years of engineering experience or Bachelor's degree in computer science.
• Experience in threat modeling, secure coding, and identity management.

Responsibilities

• Creating and maintaining threat models for software projects.
• Performing secure code reviews in Java, Python, and JavaScript.
• Providing security training to development teams.

Skills

Threat Modeling

Secure Coding

Identity Management

Cryptography

Network Security

Communication

Education

Bachelor's degree in computer science

Tools

Python

Java

C++

Job description

Security Engineer II, Stores Application Security

Join to apply for the Security Engineer II, Stores Application Security role at Amazon.

Job Description

In Amazon Stores, we ship some of the widest arrays of technology found at any company. From Amazon.com to world-class machine learning pipelines, from digital healthcare to no-checkout retail, we push the boundaries of technology using the globe’s largest AWS deployment.

As a Security Engineer, you will collaborate with software development teams to ensure customer safety while developing these services. Your tasks may include inspecting application code for security issues, building frameworks to help developers build faster and more securely, or designing security for new services.

The ideal candidate combines technical expertise with leadership, communication skills, and the ability to influence and prioritize risks effectively. You should be a security generalist with deep expertise in one or more areas, capable of articulating risks to both technical and non-technical audiences.

Our organization values work-life harmony and invests in reducing on-call time, allowing the team to focus on high-value tasks. Join the stores AppSec team to work hard, have fun, and make history!

Key Responsibilities

• Creating, updating, and maintaining threat models for various software projects
• Performing manual and automated secure code reviews in Java, Python, and JavaScript
• Developing security automation tools
• Conducting adversarial security analysis using cutting-edge tools
• Providing security training and outreach to development teams
• Offering security architecture and design guidance
• Solving security problems with novel methods
• Influencing team processes, priorities, and decisions to improve security outcomes

About The Team & Amazon Security

Amazon Security values diversity and encourages candidates with varied experiences to apply, even if they do not meet all qualifications. Security is central to customer trust, and our organization offers opportunities across cloud, devices, retail, healthcare, and more. We promote an inclusive culture, ongoing learning, and work-life balance.

Qualifications

Basic Qualifications:

• Experience in threat modeling, secure coding, identity management, cryptography, system administration, or network security
• Experience applying risk identification techniques
• Proficiency in Python, Java, or C++
• Bachelor's degree in computer science or 3+ years of engineering experience

Preferred Qualifications:

• Certifications such as CCSP, CEH, CFR, Cloud+, CySA+, GIAC GICSP, or PenTest+

Additional Information

Amazon is an equal opportunity employer. For workplace accommodations, visit https://amazon.jobs/content/en/how-we-hire/accommodations. The salary range is $136,000 to $212,800 annually, depending on location and experience. Benefits include medical, financial, and other support. Apply via our career site.