Security Engineer, Amazon

• Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying
• Bachelor's degree in computer science or equivalent
• 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience
• Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++
• Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP

Desirable

• Every time Amazon acquires a new company, someone needs to make sure that business is secure from Day 1. That's us — and we're looking for a Security Engineer to join our Mergers & Acquisitions security integration team
• You'll serve as the technical security lead for acquisition integrations, guiding newly acquired businesses through their security journey from deal close through full onboarding to Amazon's security services
• This isn't a "monitor dashboards and write reports" role — you'll be hands-on with diverse technology environments, solving real security problems for real businesses that are brand new to Amazon
• You'll work across the full spectrum of security domains — cloud security, endpoint protection, identity & access management, vulnerability management, incident response readiness, and more — rather than specializing in just one area
• Every acquisition is a new puzzle: different tech stacks, different threat landscapes, different business contexts. You'll never do the same thing twice
• You'll be the trusted security advisor for teams that are navigating one of the biggest transitions of their careers — joining Amazon. You'll mentor them, train them, and help them understand what "good" looks like at Amazon scale
• You'll partner directly with corporate development, business sponsors, and security service teams across Amazon to drive risk reduction and deliver scalable security solutions
• You'll have the opportunity to shape how Amazon approaches M&A security in an era of rapidly evolving threats, including building AI-native security practices into integration workflows
• We're a small, high-impact team that punches well above its weight. If you want broad security exposure, high autonomy, and the chance to directly protect Amazon's customers during some of the most critical moments in a business's lifecycle, we'd love to talk
• Serve as the technical security lead for acquisition integrations, driving all post-close security onboarding and risk remediation activities
• Assess and secure diverse technology environments inherited through acquisitions, spanning cloud infrastructure, on-premises systems, endpoints, and identity platforms
• Partner with corporate development, business sponsors, and security service teams to execute security integration strategies from deal close through full onboarding
• Identify security gaps in acquired environments through threat modeling and risk analysis, then build and execute actionable remediation plans
• Support onboarding of acquired business assets to Amazon's core security services, providing hands-on troubleshooting and escalation to service-owner teams as needed
• Review proposed architecture and design efforts connected to security integration, ensuring they meet Amazon's security bar
• Provide security mentoring and training to technical teams from acquired businesses, helping them adopt Amazon security practices and culture
• Communicate security risks and integration status clearly to both technical and non-technical stakeholders across multiple levels of the organization
• Drive continuous process improvements to how we integrate acquisitions, including evaluating and deploying security tooling at scale
• Your primary focus is securing newly acquired businesses as they transition into Amazon. No two days look the same because no two acquisitions are the same
• You might start your morning assessing an acquired company's cloud environment for security gaps, then jump on a call to walk their engineers through deploying monitoring tools
• After lunch, you're collaborating with corporate development and business integration partners to reprioritize a security roadmap based on new findings. Later, you're drafting a risk summary for leadership or building automation to make the next integration faster
• Some weeks you'll travel on-site to embed directly with a newly acquired team as their go-to security resource. Your customers are these acquired businesses — teams navigating a major transition who need a trusted guide to get secure, fast
• We operate with high autonomy, broad ownership, and a bias toward action. Every team member wears multiple hats — you'll collaborate directly with corporate development, engineering teams from acquired companies, and security specialists across Amazon
• We practice empathy and foster collaboration with teams navigating major transitions, and we prioritize practical solutions over perfection. If you thrive in ambiguity, enjoy building trust with new partners, and want to see the direct impact of your work on real businesses, you'll fit right in