Amazon Mobile Shopping is one of the fastest growing strategic businesses within Amazon. Our scale is billions of dollars and hundreds of millions of users globally. Our team is responsible for ensuring the most secure and private shopping experience for customers, wherever they go, on their favorite devices. We are passionate about building well-designed software that meets the demands of Amazon Mobile Shopping. We constantly improve our technical foundation and user experience. As a Security Engineer on the Mobile Shopping team, you’ll have a huge impact on how customers, including friends and family, interact with Amazon.

In this role, you will be responsible for assessing code for security issues, and building new frameworks that support our threat modeling and vulnerability management of the Amazon Mobile Shopping app. You will work with Software Development Engineers and Security Engineers in raising the bar of the shopping experience by developing innovative solutions to complicated problems. Successful candidates will possess an entrepreneurial spirit and passion for their work. They will be self-motivated and comfortable setting their own direction in an always-changing and highly-complex environment.

The present-day customer is inquisitive about how their data is being used or shared. We want our customers to have visibility and control over how their data gets used, stored, shared, and accessed. Working backwards from the customer, the Amazon Mobile Shopping team raises the bar by building guardrails and mechanisms to mitigate privacy and security risks and enforcing compliance in the Amazon Shopping experience.


Key job responsibilities
* Independently solve security & privacy problems that require novel methods or approaches
* Security architecture and design guidance
* Development of security & privacy guardrails and governance tools
* Influence your team’s and partners’ process, priorities, and choices to improve the security posture of Amazon Mobile Shopping
* Creating, updating, and maintaining threat models for a wide variety of software projects
* Adversarial security analysis using innovative tools to augment manual effort
* Security training and outreach for internal development teams