Security Engineer II, AppSec Stores, Stores Security

About the role

In Amazon Stores we ship some of the widest arrays of technology found at any company. As a Security Engineer you will collaborate with software development teams to keep customers safe while developing novel services. You may inspect application code for security issues, build frameworks to help developers work faster and more securely, or fine‑tune the design of new services alongside developers. The ideal candidate combines technical acumen with the ability to lead by influence and communicate clearly, acting as a security generalist with one or more deep‑expertise areas.

Key responsibilities

• Create, update, and maintain threat models for a wide variety of software projects.
• Perform manual and automated secure code reviews, primarily in Java, Python, and JavaScript.
• Develop security automation tools.
• Conduct adversarial security analysis using modern tools to augment manual effort.
• Provide security training and outreach for internal development teams.
• Offer security architecture and design guidance.
• Independently solve security problems that require novel methods or approaches.
• Influence team and partner processes, priorities, and choices to improve outcomes.

About the team

Amazon Security values diverse experiences and encourages candidates with non‑traditional backgrounds to apply. The organization maintains a high bar for security across all Amazon products and services, offering opportunities to work on cloud, devices, retail, entertainment, healthcare, operations, and physical stores.

Our inclusive culture emphasizes continuous learning, DEI events, and the celebration of diverse ideas, perspectives, and voices. We provide extensive training, knowledge‑sharing, and career‑advancing resources to help professionals become well‑rounded.

Work‑life harmony is a priority; we strive for flexibility so success at work does not come at the expense of personal life.

Basic qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or a similar object‑oriented language.
• 2+ years of scripting, programming, and security code review in a common programming language (non‑internship).
• 2+ years of troubleshooting system issues, analyzing logs, or automating basic tasks using command‑line tools (non‑internship).
• Bachelor’s degree in computer science or equivalent.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• Knowledge of industry‑based security vulnerabilities and remediation techniques.

Preferred qualifications

• 2+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
• Experience with command‑line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks.
• Familiarity with networking protocols, including HTTP(S), DNS, and TCP/IP.
• Experience with AWS products and services.
• Experience in scripting, programming, or security code reviewing in a common language such as Python, Java, or C++.
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing.

Compensation

The base salary range for this position in Seattle, WA is $159,300 – $202,400 USD annually. The total Amazon package includes sign‑on payments and restricted stock units (RSUs). Final compensation is determined based on experience, qualifications, and location.

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription).
• Basic Life & AD&D insurance with optional supplemental life plans.
• Employee Assistance Program (EAP) and mental health support.
• Medical advice line.
• Flexible Spending Accounts.
• Adoption and surrogacy reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.