Sr. Security Engineer, Stores Application Security

In Amazon Stores, we ship some of the widest arrays of technology found at any company. From amazon.com to world class machine learning pipelines, from innovative digital healthcare to no-checkout retail, Basic qualifications: - 5+ years of work in identifying security issues and risks, and developing mitigation plans experience - Experience working in identifying security issues and risks, and developing mitigation plans - Experience as a mentor, tech lead or leading an engineering team - BS in Computer Science, Information Security, 5+ years of demonstrated experience in areas such as application security, offensive security and/or systems security and have a strong application security background with a focus on scalable solutions - Solid understanding of threat modeling, design and architecture review, manual source code review, security vulnerabilities, attacker exploit techniques, and methods for their remediation and have excellent understanding of network architecture, enterprise IT systems and cloud such as AWS - Programming/Scripting skills (E.g: Java, Python, Perl, Bash, Ruby, PowerShell, etc.) Excellent written and verbal communication skills and strong problem-solving ability and the ability to work in ambiguous and constantly evolving environment - Can identify and remove bottlenecks for your teammates, both in process and technology and collaborate with security stakeholders to develop security strategies and Can explain complex technical risks in simple, clear language that non-technical stakeholders can easily understand and act upon. Preferred: - Experience applying threat modeling or other risk identification techniques or equivalent - Experience with security in service-oriented architectures/microservices and web services - Demonstrated strong judgment in assessing and prioritizing technical risk, with a solid application security background and a focus on scalable solutions. - Proven experience designing, building, and securing complex AWS architectures. - Excellent written and verbal communication skills, with the ability to convey complex technical concepts effectively. - Proactive in identifying and eliminating bottlenecks across processes and technology to enhance team productivity. - Experience in one or more of the following areas: threat modeling, secure coding, identity and access management (IAM), authentication, software development, cryptography, or security research. - Strong expertise in AWS services, network architecture, and enterprise IT environments. - Hands-on experience performing security activities across one or more phases of the Software Development Lifecycle (SDLC), including security design reviews, threat modeling, secure code reviews, and security testing. - Proven ability to drive continuous, scalable improvements in security controls and practices, and to collaborate effectively with stakeholders to develop and implement security strategies. Our inclusive culture empowers Amazonians to deliver the best results for our customers. If you have a disability and need a workplace accommodation or adjustment during the application and hiring process, including support for the interview or onboarding process, please visit https://amazon.jobs/content/en/how-we-hire/accommodations for more information. If the country/region you’re applying in isn’t listed, please contact your Recruiting Partner.