Security Engineer II, Customer Logistics Security

About the role

As a Security Engineer II in Customer Logistics Security (CLS), you will protect the infrastructure that powers Amazon's global fulfillment network—including warehouses, fulfillment centers, air hubs, and last‑mile delivery operations. You will perform vulnerability assessments with business context, determine blast radius of security issues across large‑scale environments, and drive risk reduction across thousands of accounts and services. The role emphasizes building AI‑powered automation, applying machine learning to vulnerability triage and asset classification, conducting threat hunting, managing security exceptions, and collaborating with engineering teams to ensure timely remediation of risks.

Key responsibilities

• Design, build, and deploy AI/ML‑powered solutions to scale vulnerability management operations, including intelligent triage, automated severity contextualization, predictive asset classification, and natural‑language remediation guidance generation.
• Perform vulnerability assessments with business context, evaluating blast radius and potential impact across accounts, services, and infrastructure.
• Engineer high‑quality, scalable vulnerability detection mechanisms such as automated asset‑to‑vulnerability correlation, compliance monitoring pipelines, and continuous scanning coverage.
• Design, build, and maintain automated workflows and tooling (Python, AI/ML) to reduce manual toil, improve response times, and enable operation at scale across thousands of accounts and services.
• Conduct proactive threat hunting across vulnerability and asset data to identify security risks, attack patterns, and coverage gaps before exploitation.
• Drive remediation outcomes by collaborating with engineering teams across multiple organizations, providing technical guidance, root‑cause analysis, and remediation recommendations.
• Own security remediation campaigns end‑to‑end, including scoping affected owners, progress tracking, stakeholder communication, and risk trade‑off analysis.
• Manage security exception processes, evaluating risk justifications, coordinating approvals, and tracking compliance with exception conditions; make judgment calls on severity reclassification when compensating controls reduce risk.
• Perform security code reviews, root‑cause analysis on high‑severity findings, and architecture assessments; validate remediation fixes in code and identify systemic vulnerability patterns.
• Maintain operational metrics, reporting dashboards, and executive‑level risk summaries; participate in periodic on‑call responsibilities for continuous monitoring and time‑sensitive vulnerability response.
• Maintain clear documentation of processes, review outcomes, security decisions, and runbooks; mentor team members on technical approaches and operational procedures.

A day in the life

• Build an AI‑powered pipeline that automatically triages incoming vulnerability findings, contextualizes severity, and generates personalized remediation guidance.
• Assess the blast radius of a newly disclosed critical vulnerability across industrial control systems at hundreds of sites, distinguishing exploitable devices from those protected by compensating controls.
• Train a classification model to predict asset ownership across millions of devices, replacing weeks of manual attribution with automated, accurate assignment.
• Validate that an engineering team’s proposed code fix correctly addresses the root cause of a security finding.
• Design an automated notification workflow that reaches hundreds of system owners with actionable remediation instructions before a campaign deadline.
• Handle a high‑severity security escalation involving a nation‑state advisory targeting operational technology, size the exposure, and coordinate remediation.
• Present vulnerability metrics and AI‑driven risk insights to security leadership.

About the team

Customer Logistics Security protects Amazon's global logistics and fulfillment infrastructure—the technology that powers every fulfillment center, sort center, air hub, and delivery station worldwide. The team identifies, tracks, and remediates security risks within defined timelines, operating at the intersection of cloud security, operational technology, and vulnerability management. Partnering closely with detection teams, campaign owners, and engineering organizations, the team is heavily investing in AI/ML to enable predictive asset classification, intelligent vulnerability triage, automated severity contextualization, and natural‑language remediation guidance.

Basic qualifications

• Bachelor's degree in computer science or equivalent.
• 5+ years of IT security experience.
• Knowledge of industry‑based security vulnerabilities and remediation techniques.
• Experience in scripting, programming, and security code reviewing in a common programming language (non‑internship).
• Experience applying threat modeling or other risk identification techniques, or equivalent.
• Experience troubleshooting system issues, analyzing logs, or automating basic tasks using command‑line tools (non‑internship).

Preferred qualifications

• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing.
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP.
• 5+ years of scripting, programming, or security code review in a common language (e.g., Python, Java, C++).
• 4+ years of experience in any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, or network security.
• Knowledge of command‑line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks.
• Experience with AWS products and services.

Benefits

• Comprehensive health insurance (medical, dental, vision, prescription).
• Basic Life & AD&D insurance with optional supplemental life plans.
• Employee Assistance Program and mental health support.
• Medical Advice Line.
• Flexible Spending Accounts.
• Adoption and surrogacy reimbursement coverage.
• 401(k) matching.
• Paid time off and parental leave.

Pay

Base salary ranges (USD annually):

• Jersey City, NJ: $159,300 – $212,800
• Austin, TX: $159,300 – $202,400

Compensation includes sign‑on payments and restricted stock units (RSUs); final amounts are determined based on experience, qualifications, and location.