Amazon
Security Engineer II, Devices and Services Security
$167K–$213K
Sunnyvale, CA · Full-time · Posted Jul 15, 2026
- Experience
- 3+ years in each of the stated experience categories; the first allows any combination of its listed areas.
- Education
- Bachelor's degree in a STEM field, or experience in IT Security.
About the job
Secures Amazon Devices and Services organizations, primarily Zoox, through security reviews, risk management, tooling, and guidance for software and infrastructure.
What you'll do
- Create and maintain threat models; conduct manual and automated secure code reviews, primarily in Java, Python and Javascript.
- Build security automation and improve detection of misconfigurations; perform design reviews and infrastructure risk assessments.
- Advise and train development teams, and coordinate security posture, risks, and cross-organizational expectations.
What they ask for
- Bachelor's degree in a STEM field or experience in IT Security.
- 3+ years across threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and/or network security.
- 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or a similar object-oriented language.
- 3+ years troubleshooting systems, analyzing logs, or automating basic tasks using command line tools (non-internship); knowledge of security vulnerabilities and remediation.
Nice to have
- Experience with AWS products and services and security work across software development lifecycle phases.
- Experience supporting security programs for robotics, automotive, autonomous-vehicle, or physical-product companies; compliance frameworks; or LLM-based security workflow tools.
Pay
USD 166,600.00 - 212,800.00 annually (base salary)
Tools
Java, Python, Javascript, Ruby, Go, Swift, .Net, C++
AI focus
Preferred experience integrating LLM-based tooling into security workflows, such as triage assistants, evidence collection, and control-mapping copilots; AI security is also listed as a possible experience area.
Model-written summary · the original posting is authoritative