Security Engineer II, Stores Application Security

- Creating, updating, and maintaining threat models for a wide variety of software projects - First party application security research - Manual and Automated Secure Code Review, primarily in Java, Python and Javascript - Identifying and mitigating security issues at scale - Development of security automation tools - Adversarial security analysis using innovative tools to augment manual effort - Security guidance and working with internal software development teams on securing their applications - Independently solve security problems that require novel methods or approaches - Influence your team’s and partners’ process, priorities, and choices to improve outcomes BASIC QUALIFICATIONS - Experience performing security activities across one or more phases of the software development lifecycle (SDLC), such as security design review, threat modeling, secure code review, and security testing - Bachelor's degree in Computer Science, Information Security, 3+ years of demonstrated experience of comprehensive application security assessments, including both automated and manual assessment. - Have good understanding of network architecture, enterprise IT systems and cloud such as AWS. - Proficiency in programming or scripting languages (e.g., Java, Python, Perl, Bash, Ruby, PowerShell, etc.). - Ability to explain complex technical risks in simple, clear language so that non-technic PREFERRED QUALIFICATIONS - 3+ years of experience in one or more of the following areas: threat modeling, secure coding, identity and access management (IAM) and authentication, software development, cryptography, or security research. - Strong experience with AWS services, network architecture, and enterprise IT systems. - Hands-on experience performing security activities across one or more phases of the Software Development Lifecycle (SDLC), including security design reviews, threat modeling, secure code reviews, and

Amazon is a global technology company operating in e-commerce, cloud computing (AWS), digital streaming, advertising and artificial intelligence. Its India operations span development centres in Bengaluru, Hyderabad, Chennai, Pune, Gurugram and Mumbai, covering retail technology, AWS infrastructure, Alexa, advertising, payments and supply-chain systems.