Security Engineer II, CLS Application Security

Amazon CLS Application Security is hiring a Security Engineer II to embed security early and scale prevention through automation and AI-enabled tooling.

Responsibilities

• Own a strategic security initiative end to end: scoping, design, implementation, testing, deployment, and maintenance, while guiding other engineers during execution
• Build security automation and AI-powered tooling to move beyond one-off reviews, including prevention rules, secure defaults, and “paved paths” that stop vulnerabilities before production
• Review application architecture and designs by leading security design reviews and steering teams toward secure-by-default implementations
• Partner directly with development teams to resolve findings and deliver fast, actionable guidance aligned with the security bar
• Identify opportunities to centralize controls so multiple teams can adopt a shared solution instead of building duplicates
• Investigate ambiguous, high-impact risks, detect patterns across large application footprints, and fix root causes with reproducible mechanisms that are simple, maintainable, and built to last
• Communicate risk and recommendations clearly to engineers, partner security teams, and business stakeholders, and advocate for the right outcome even when it is unpopular
• Coach and mentor teammates to raise the team’s operating standard and the value delivered

Requirements

• 2+ years of experience in scripting, programming, and security code review in a common programming language (non-internship)
• Knowledge of system security vulnerabilities and remediation techniques, including penetration testing and development of exploits (or equivalent)
• Experience owning and leading significant projects from concept through deployment
• Experience writing to communicate security risk to technical and non-technical stakeholders
• 3+ years of application security engineering experience, including security design reviews, threat modeling, and code-level vulnerability analysis
• Experience carrying a builder-facing security consult load, including intake, triage, guidance, and resolution tracking

Technologies

• AWS: IAM, VPC, KMS, CloudTrail
• CI/CD pipelines

Benefits

• Sign-on payments
• Restricted stock units (RSUs)
• Health insurance (medical, dental, vision, prescription), Basic Life & AD&D insurance, and option for Supplemental life plans; EAP and Mental Health Support; Medical Advice Line; Flexible Spending Accounts; Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Preferred Qualifications

• Experience in a logistics/operations environment
• Experience with root cause analysis and error correction, including changing procedures and systems for long-term fixes to avoid repeat issues
• Experience mentoring, leading, or managing more junior engineers
• Experience with cloud security in AWS (IAM, VPC, KMS, CloudTrail, or equivalent services)
• Experience building automated security controls or shifting security left in CI/CD pipelines

Location and Work Model

• Irvine, CA (onsite)

Additional Job Information (Los Angeles County Applicants)

• Job duties include: work safely and cooperatively with other employees, supervisors, and staff; adhere to standards of excellence despite stressful conditions; communicate effectively and respectfully to ensure exceptional customer service; and follow all federal, state, and local laws and Company policies
• Criminal history may have a direct, adverse, and negative relationship with some material job duties
• Under the Los Angeles County Fair Chance Ordinance, qualified applicants with arrest and conviction records will be considered

Work/Life Balance

• Work-life harmony is valued
• Flexible work hours and arrangements are part of the culture

Training & Career Growth

• Endless knowledge-sharing, training, and other career-advancing resources

Inclusive Team Culture

• Ongoing DEI events and learning experiences to embrace uniqueness and continue learning
• Seeking out and celebrating diverse ideas, perspectives, and voices to address tough security challenges

Compensation: USD 159,300 - 202,400 per year

Minimum experience: 3 years