Security Engineer II: Threat Detection & App Security

Amazon; New York (NY); On-site; USD 159,000 - 213,000; Full time

Job summary

Amazon.com Services LLC in New York, NY is seeking a Security Engineer II to provide frontline information security support for customer-facing services and internal platforms. The role includes conducting penetration testing, reviewing configurations, advising on security policy compliance, and monitoring emerging threats to protect data confidentiality.

The candidate will participate in developing security policies, perform application security reviews, and escalate issues for timely

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Systems, or related field.
• 1 year of experience in information security or related occupation.
• Experience with threat modeling and risk identification techniques.
• Programming in Java, C, C++, Perl, Ruby or Python.
• Knowledge of security vulnerabilities and remediation, including penetration testing.

Responsibilities

• Provide frontline information security support for issues across security domains.
• Conduct penetration testing and security reviews of applications and infrastructure.
• Advise on security policy compliance and data confidentiality.
• Monitor threats and respond to emerging security incidents.
• Develop information security policies and processes.

Skills

Threat modeling

Penetration testing

Programming: Java

Programming: C/C++

Python

Vulnerability assessment

Security policy

Education

Bachelor’s degree in Computer Science / Engineering / Information Systems or related field

Tools

Vulnerability testing tools

Job description

Amazon.com Services LLC in New York, NY is seeking a Security Engineer II to provide frontline information security support for customer-facing services and internal platforms. The role includes conducting penetration testing, reviewing configurations, advising on security policy compliance, and monitoring emerging threats to protect data confidentiality.

The candidate will participate in developing security policies, perform application security reviews, and escalate issues for timely