Security Engineer II, Stores AppSec

About the role

Amazon’s Stores AppSec Team is seeking a Security Engineer to help keep Amazon secure for its customers. In this role you will attack Amazon’s services, applications, and websites to discover security issues and report them to internal technology teams. The position offers challenging technical and leadership opportunities, and the chance to hack Amazon alongside a highly skilled team.

Responsibilities

• Conduct high‑quality application security reviews and penetration tests independently or as part of a team.
• Create detailed engagement plans and thoroughly document findings, gaps, and remediation recommendations.
• Contribute to team tooling, innovation, and process improvements.
• Communicate and collaborate with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive resolution of discovered security findings.

About the team

Amazon Security values diverse experiences and encourages candidates from non‑traditional backgrounds to apply. The organization maintains a high security bar across all Amazon products and services, offering exposure to cloud, devices, retail, entertainment, healthcare, operations, and physical stores. The culture emphasizes curiosity, DEI events, continuous learning, and work‑life harmony with flexible hours and arrangements.

Basic qualifications

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or a similar object‑oriented language.
• 2+ years of scripting, programming, and security code review in a common programming language (non‑internship).
• 2+ years of troubleshooting system issues, analyzing logs, or automating basic tasks using command‑line tools (non‑internship).
• Bachelor’s degree in a STEM field, or 2+ years of IT security experience.
• Knowledge of networking protocols such as HTTP, DNS, and TCP/IP.
• Knowledge of industry‑based security vulnerabilities and remediation techniques.

Preferred qualifications

• 2+ years of any combination of threat modeling, secure coding, identity management/authentication, software development, cryptography, system administration, or network security.
• Experience with command‑line tools to troubleshoot protocols, analyze log outputs, or automate tasks.
• Experience with AWS products and services.
• Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing.

Benefits

Amazon offers comprehensive benefits including health insurance (medical, dental, vision, prescription), Basic Life & AD&D insurance with supplemental options, Employee Assistance Program, mental health support, medical advice line, flexible spending accounts, adoption and surrogacy reimbursement, 401(k) matching, paid time off, and parental leave.

Pay

Base salary range: $159,300 – $212,800 USD annually (USA, New York). The total compensation package includes sign‑on payments and restricted stock units (RSUs), with final amounts determined by experience, qualifications, and location.