> Markdown version of [/jobs/ext/2966434-security-engineer-ii-appsec-stores-stores-security](https://www.wearedevelopers.com/jobs/ext/2966434-security-engineer-ii-appsec-stores-stores-security). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Security Engineer II, AppSec Stores, Stores Security

- **Company:** Amazon.com, Inc.
- **Location:** Seattle, WA, United States
- **Experience:** Experienced
- **Salary:** $159,300.0 - $202,400.0
- **Contract:** Internship / Graduate position
- **Skills:** Java (Programming Language), JavaScript (Programming Language), .NET Framework, Amazon Web Services, User Authentication, C++ (Programming Language), Command-Line Interface, Code Review, Cyber Security, Computer Programming, Domain Name System (DNS), Hypertext Transfer Protocols (HTTP), HTTP Secure, Identity and Access Management, Python (Programming Language), Network Security, Network Protocols, Object-Oriented Software Development, Systems Development Life Cycle, Ruby, Secure Coding, Software Engineering, TCP/IP, Scripting, Software Security, Swift (Programming Language), Information Technology, Golang, Programming Languages
- **Published:** September 17, 2026
- **Apply:** https://dejobs.org/x/x/B222E7292FD844BD9825F986D8866FAC/job/

## About the Role

* 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
 * 2+ years of scripting, programming, and security code review in a common programming language (non-internship) experience
 * 2+ years of troubleshooting systems issues, analyzing logs, or automating basic tasks using command line tools (non-internship) experience
 * Bachelor's degree in computer science or equivalent
 * Knowledge of networking protocols such as HTTP, DNS and TCP/IP
 * Knowledge of industry-based security vulnerabilities and remediation techniques, * 2+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
 * Knowledge of command line tools to troubleshoot protocols, analyze log outputs, or automate basic tasks
 * Knowledge of networking protocols, to include HTTP(S), DNS, and TCP/IP
 * Experience with AWS products and services
 * Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C+- Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing

## Description

* Creating, updating, and maintaining threat models for a wide variety of software projects
 * Manual and Automated Secure Code Review, primarily in Java, Python and JavaScript
 * Development of security automation tools
 * Adversarial security analysis using modern tools to augment manual effort
 * Security training and outreach for internal development teams
 * Security architecture and design guidance
 * Independently solve security problems that require novel methods or approaches
 * Influence your team's and partners' process, priorities, and choices to improve outcomes


## Related Videos

- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [An Applied Introduction to eBPF with Go](https://www.wearedevelopers.com/videos/1075-an-applied-introduction-to-ebpf-with-go)
- [Go with the Flow: Stop the Leaks Before Your Memory's a Waterfall!](https://www.wearedevelopers.com/videos/100073-go-with-the-flow-stop-the-leaks-before-your-memory-s-a-waterfall)
- [Coffee with Developers: David Heinemeier Hansson](https://www.wearedevelopers.com/videos/875-coffee-with-developers-david-heinemeier-hansson)
- [Software Security 101: Secure Coding Basics](https://www.wearedevelopers.com/videos/220-software-security-101-secure-coding-basics)
- [Turning Container security up to 11 with Capabilities](https://www.wearedevelopers.com/videos/718-turning-container-security-up-to-11-with-capabilities)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)
- [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)
- [The 12 Best Jobs for Software Engineers](https://www.wearedevelopers.com/magazine/401-the-12-best-jobs-for-software-engineers)