Security Engineer II, Stores Application Security
Core
Security Engineer collaborating with software development teams to ensure customer safety by inspecting code, building security frameworks, and fine-tuning service designs.
Role type
Security Engineer II (Application Security)
Builds
Secure Ring 0 applications and security tooling for Amazon Stores
Domain
Retail technology, Cloud security, Application Security
Deliverable
production ML models | product features | dashboards & analysis
Required skills
Python, Java, JavaScript, Go, C++, Ruby, .Net, C++, networking protocols (HTTP, DNS, TCP/IP), security vulnerability assessment, log analysis, command line automation, threat modeling, secure coding, adversarial security analysis
Preferred skills
AWS products and services, identity management and authentication, cryptography, system administration, network security
Technologies
AWS, Java, Python, JavaScript, Go, C++, Ruby, .Net
Responsibilities
Define and drive implementation of proactive security controls for critical Ring 0 applications; Evaluate and implement security controls to ensure secure application development; Assess and drive mitigation of security risks; Build and/or drive adoption of security tooling (automated threat modeling, code scanning, security test generation); Drive adoption of security guardrails, testing frameworks, and monitoring; Collaborate with builder teams to integrate security guidance into development workflows; Develop and maintain security documentation including threat models and risk assessments; Support security incident investigations; Perform manual and automated secure code review; Identify and mitigate security issues at scale; Provide security guidance to internal development teams and stakeholders; Independently solve complex security problems
