Security Engineer II, Customer Service Security

Amazon’s Customer Service Security team helps keep customer data protected while enabling fast, high-quality customer and associate experiences at massive scale. As a Security Engineer II, you will work alongside business and engineering teams to spot security risks, design practical controls, and build scalable security frameworks for customer service operations. This is a hands-on security engineering role focused on reducing security risk across customer contacts globally, supporting billions of interactions each year across more than 40 countries.

Location: Seattle, WA (onsite)
Compensation: USD 159,300 - 202,400 per yearly

What you’ll get

• Health insurance including medical, dental, vision, prescription coverage, Basic Life & AD&D insurance, and options for Supplemental life plans
• Employee resources including EAP and Mental Health Support, plus a Medical Advice Line
• Flexible Spending Accounts and Adoption and Surrogacy Reimbursement coverage
• 401(k) matching
• Paid time off
• Parental leave

Responsibilities

• Lead security reviews, threat modeling, and risk assessments for customer service systems, using pragmatic approaches that help teams launch securely.
• Design and build security controls and engineering solutions that protect customer data and support secure customer contacts at scale.
• Partner with business stakeholders, product owners, and engineering teams to understand emerging risks and define security strategies where none exist yet.
• Create security frameworks, runbooks, and rubrics for new problem domains so other engineers can apply consistent, repeatable security practices.
• Communicate security risk and design decisions clearly in writing to both technical and non-technical audiences, and mentor other security engineers on best practices.

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++, or a similar object-oriented language.
• 2+ years of scripting, programming, and security code review in a common programming language (non-internship).
• 2+ years of troubleshooting system issues, analyzing logs, or automating basic tasks using command line tools (non-internship).
• Bachelor’s degree in a STEM field, or 2+ years of IT Security experience.
• Knowledge of networking protocols including HTTP, DNS, and TCP/IP.
• Knowledge of industry-based security vulnerabilities and remediation techniques.

Preferred qualifications

• 2+ years of any combination of threat modeling, secure coding, identity management and authentication, software development, cryptography, system administration, and network security.
• Experience performing security activities across one or more phases of the SDLC, such as security design review, threat modeling, secure code review, and security testing.
• Experience conducting insider threat investigations.
• Experience securing telephony systems against risk.

A day in the life

• Work independently while engaging directly with business and engineering teams to uncover security risks that do not come with predefined solutions.
• Conduct threat models for new customer contact workflows, write security frameworks that other teams will adopt, and review architecture proposals against the security bar.
• Translate business context into concrete security requirements while building the path forward in ambiguous problem spaces.
• Balance proactive roadmap-driven work with responding to emerging security concerns as they arise.

Core technologies

Python, Ruby, Go, Swift, Java, .Net, C++, HTTP, DNS, TCP/IP

About the team

The CS Security team is focused on reducing security risk across Amazon’s customer service organization. Their work helps keep customer data secure while enabling fast, high-quality customer and associate experiences at massive scale. The team engineers solutions that protect billions of customer contacts annually across more than 40 countries, and they are investing in new engineering capabilities to improve the security of every customer contact.