Amazon
Sr. Security Engineer, AppSec - Amazon Stores Security
$175K–$237K
New York, NY · Senior · Full-time · Posted May 14, 2026
- Experience
- 4+ years in troubleshooting/log analysis/command-line automation; 5+ years in security risk identification and mitigation; 4+ years in scripting, programming, and security code review; 8+ years of Application Security or Development experience.
- Education
- Bachelor's degree
About the job
Provides application security expertise to Amazon Stores teams by reviewing code, guiding secure design, developing security tools, and helping prioritize and mitigate risks.
What you'll do
- Create and maintain threat models; conduct manual and automated secure code reviews.
- Develop security automation and use adversarial analysis to identify security issues.
- Provide architecture guidance, security training, and influence partners’ security processes and priorities.
What they ask for
- 4+ years troubleshooting systems, analyzing logs, or automating complex tasks with command-line tools; 5+ years identifying security risks and developing mitigations; 4+ years scripting, programming, and security code review.
- Knowledge of at least two of Scala, Java, Python, C/C++, or Go; industry experience identifying vulnerabilities, attack patterns, and remediation techniques.
- Bachelor's degree; experience applying threat modeling or other risk identification techniques or equivalent.
- Broad and deep application security knowledge; 8+ years of Application Security or Development experience.
Nice to have
- Experience with security in service-oriented architectures/microservices and web services; mentoring, tech lead, or engineering team leadership experience.
- One or more listed certifications: CCSP, CEH, CFR, Cloud+, CySA+, GCED, GICSP, or PenTest+.
Pay
175,100.00 - 236,900.00 USD annually (base salary)
Tools
Java, Python, JavaScript, Scala, C/C++, Go
Model-written summary · the original posting is authoritative