Security Engineer II — Threat Modeling & Secure Coding (Remote)

Amazon; United States; On-site; USD 159,000 - 202,000; Full time

Benefits offered by this job

Flexible hours

Health insurance

Job summary

Amazon.com Services LLC seeks a Security Engineer to collaborate with software teams, drive threat modeling, and improve security during development. You will conduct secure code reviews and build automation to scale security across services.

The role emphasizes clear communication of risks to technical and non-technical audiences and leadership by influence across projects and teams.

Qualifications

• Experience across one or more phases of the SDLC such as security design review, threat modeling, secure code review, and security testing.
• Bachelor's degree in computer science or equivalent, or 3+ years of IT security experience.
• Experience with network architecture and cloud services such as AWS.
• Proficiency in programming or scripting languages (Java, Python, Perl, Bash, Ruby, PowerShell, etc.).
• Ability to explain complex risks to non-technical stakeholders.

Responsibilities

• Create, update, and maintain threat models for multiple software projects.
• Conduct first-party application security research.
• Perform manual and automated secure code reviews in primary languages.
• Identify and mitigate security issues at scale.
• Develop security automation tools and guidance for teams.
• Engage with development teams to secure applications.

Skills

Threat modeling

Secure code review

Security testing

Java/Python scripting

Education

Bachelor's degree in CS or equivalent

Tools

AWS

Job description

Amazon.com Services LLC seeks a Security Engineer to collaborate with software teams, drive threat modeling, and improve security during development. You will conduct secure code reviews and build automation to scale security across services.

The role emphasizes clear communication of risks to technical and non-technical audiences and leadership by influence across projects and teams.