Security Engineer II, Stores AppSec - Flexible Hours

Amazon; New York (NY); On-site; USD 159,000 - 213,000; Full time

Job summary

Amazon Security is seeking a Security Engineer II to join the Stores Application Security team in New York. You will collaborate with software development teams to identify security issues, build secure development practices, and drive security instrumentation across critical services.

The role requires deep security expertise, ability to communicate risks clearly to diverse audiences, and leadership by influence to align partners toward secure solutions.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience.
• Knowledge of networking protocols and security vulnerabilities; ability to explain risks to both technical and non-technical audiences.
• Experience troubleshooting systems, analyzing logs, and automating tasks via command line tools.

Responsibilities

• Define and drive proactive security controls for critical applications.
• Evaluate and implement security controls to ensure secure default behavior.
• Assess and drive mitigation of security risks across Ring 0 apps.
• Build or drive adoption of security tooling to scale security across AppSec.
• Collaborate with development teams to integrate security guidance into workflows.
• Develop and maintain security documentation including threat models and risk assessments.
• Support security incident investigations related to Ring 0 systems.
• Perform manual and automated secure code review (Java, Python, JavaScript).
• Identify and mitigate security issues at scale.
• Perform adversarial security analysis.
• Provide security guidance to internal teams and leaders.

Skills

Python

Ruby

Go

Swift

Java

.Net

C++

Education

Bachelor's degree in STEM or IT Security

Job description

Amazon Security is seeking a Security Engineer II to join the Stores Application Security team in New York. You will collaborate with software development teams to identify security issues, build secure development practices, and drive security instrumentation across critical services.

The role requires deep security expertise, ability to communicate risks clearly to diverse audiences, and leadership by influence to align partners toward secure solutions.