Security Engineer II, Stores Application Security

Amazon is a leading technology company that pushes the boundaries of innovation across various domains. They are seeking a Security Engineer to collaborate with software development teams, ensuring customer safety while developing new services and applications.

Responsibilities:

• Creating, updating, and maintaining threat models for a wide variety of software projects
• Conducting first-party application security research
• Performing manual and automated secure code review, primarily in Java, Python, and JavaScript
• Identifying and mitigating security issues at scale
• Developing security automation tools
• Performing adversarial security analysis using innovative tools to augment manual effort
• Providing security guidance and working with internal software development teams to secure their applications
• Independently solving security problems that require novel methods or approaches
• Influencing your team's and partners' processes, priorities, and choices to improve outcomes

Requirements:

• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing
• Bachelor's degree in computer science or equivalent, or 3+ years of IT Security experience
• Experience with network architecture, enterprise IT systems and cloud such as AWS
• Proficiency in programming or scripting languages (e.g., Java, Python, Perl, Bash, Ruby, PowerShell, etc.)
• Experience with explaining complex technical risks in simple, clear language so that non-technical stakeholders can easily understand and take appropriate action
• Experience with AWS services, network architecture, and enterprise IT systems
• Experience driving continuous and scalable improvements in security controls and practices, and collaborating with security stakeholders to develop and implement security strategies
• 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and penetration testing experience