Security Engineer II: Threat Modeling & Secure Coding

Amazon; Seattle (WA); On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

RSUs

Health insurance

401(k) matching

Paid time off

Job summary

Amazon.com Services LLC in Seattle, WA, is seeking a Security Engineer to partner with software teams to build secure services, review code, and develop automation to scale security across the stores platform.

The role emphasizes threat modeling, secure code review in Java, Python, JavaScript, and guiding architecture decisions while communicating risk clearly to technical and non-technical stakeholders.

Qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
• 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
• Bachelor's degree in computer science or equivalent
• Knowledge of networking protocols such as HTTP, DNS and TCP/IP
• Knowledge of industry-based security vulnerabilities and remediation techniques

Responsibilities

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript
• Development of security automation tools
• Adversarial security analysis using modern tools to augment manual effort
• Security training and outreach for internal development teams
• Security architecture and design guidance
• Independently solve security problems that require novel methods or approaches
• Influence your team’s and partners’ process, priorities, and choices to improve outcomes

Skills

Python

Java

C++

Go

Ruby

Swift

.NET

Education

Bachelor's degree in CS

Tools

AWS

Job description

Amazon.com Services LLC in Seattle, WA, is seeking a Security Engineer to partner with software teams to build secure services, review code, and develop automation to scale security across the stores platform.

The role emphasizes threat modeling, secure code review in Java, Python, JavaScript, and guiding architecture decisions while communicating risk clearly to technical and non-technical stakeholders.