Security Engineer II, Stores Application Security

Experteer Overview As a Security Engineer at Amazon Security, you help keep customer trust by embedding secure practices into high-impact services across Ring 0 applications. You will collaborate with development teams to design proactive security controls, build scalable tooling, and lead risk-based decisions. You’ll translate complex risks for technical and non-technical stakeholders while guiding partners toward secure solutions. This role offers involvement across a broad security landscape, from code reviews to threat modeling, in a fast-paced, impact-driven environment. Compensation / Benefits * Define and drive proactive security controls for Ring 0 applications * Evaluate and implement security controls to ensure secure defaults for Ring 0 developers * Assess and mitigate security risks across projects * Build and drive adoption of security tooling (threat modeling, code scanning, test generation) * Promote security guardrails, testing frameworks, and monitoring across Ring 0 apps * Collaborate with Ring 0 builder teams to integrate security guidance into workflows * Develop and maintain security documentation (threat models, risk assessments, guidelines) * Support security incident investigations related to Ring 0 systems * Perform manual and automated secure code reviews (Java, Python, JavaScript) * Identify and mitigate security issues at scale * Conduct adversarial security analysis * Provide security guidance to internal teams, stakeholders, and leaders * Independently solve complex security problems Tasks * 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar * Bachelor’s degree in STEM or IT security experience * Knowledge of HTTP, DNS, TCP/IP networking * Knowledge of security vulnerabilities and remediation techniques * Experience with troubleshooting, logs, or automation via command line tools * Ability to explain complex technical risks clearly to non-technical audiences Key requirements * flexible work hours * health insurance * 401(k) matching * RSUs * paid time off * parential leave

to 0 apps * Collaborate with Ring 0 builder teams to integrate security guidance into workflows * Develop and maintain security documentation (threat models, risk assessments, guidelines) * Support security incident investigations related to Ring 0 systems * Perform manual and automated secure code reviews (Java, Python, JavaScript) * Identify and mitigate security issues at scale * Conduct adversarial security analysis * Provide security guidance to internal teams, stakeholders, and leaders * Independently solve complex security problems Tasks * 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar * Bachelor’s degree in STEM or IT security experience * Knowledge of HTTP, DNS, TCP/IP networking * Knowledge of security vulnerabilities and remediation techniques * Experience with troubleshooting, logs, or automation via command line tools * Ability to explain complex technical risks clearly to non-technical audiences Key requirements * flexible work hours * health insurance * 401(k) matching * RSUs * paid time off * parential leave