Security Engineer II, Differentiated Security Team (DST)

Every time Amazon acquires a new company, someone needs to make sure that business is secure from Day 1. That's us — and we're looking for a Security Engineer to join our Mergers & Acquisitions security integration team. You'll serve as the technical security lead for acquisition integrations, guiding newly acquired businesses through their security journey from deal close through full onboarding to Amazon's security services. This isn't a "monitor dashboards and write reports" role — you'll be hands-on with diverse technology environments, solving real security problems for real businesses that are brand new to Amazon. Here's what makes this role different: - You'll work across the full spectrum of security domains — cloud security, endpoint protection, identity & access management, vulnerability management, incident response readiness, and more — rather than specializing in just one area - Every acquisition is a new puzzle: different tech stacks, different threat landscapes, different business contexts. You'll never do the same thing twice - You'll be the trusted security advisor for teams that are navigating one of the biggest transitions of their careers — joining Amazon. You'll mentor them, train them, and help them understand what "good" looks like at Amazon scale - You'll partner directly with corporate development, business sponsors, and security service teams across Amazon to drive risk reduction and deliver scalable security solutions - You'll have the opportunity to shape how Amazon approaches M&A security in an era of rapidly evolving threats, including building AI-native security practices into integration workflows We're a small, high-impact team that punches well above its weight. If you want broad security exposure, high autonomy, and the chance to directly protect Amazon's customers during some of the most critical moments in a business's lifecycle, we'd love to talk. Key job responsibilities As a Security Engineer on this team, you will: - Serve as the technical security lead for acquisition integrations, driving all post-close security onboarding and risk remediation activities - Assess and secure diverse technology environments inherited through acquisitions, spanning cloud infrastructure, on-premises systems, endpoints, and identity platforms - Partner with corporate development, business sponsors, and security service teams to execute security integration strategies from deal close through full onboarding - Identify security gaps in acquired environments through threat modeling and risk analysis, then build and execute actionable remediation plans - Support onboarding of acquired business assets to Amazon's core security services, providing hands-on troubleshooting and escalation to service-owner teams as needed - Review proposed architecture and design efforts connected to security integration, ensuring they meet Amazon's security bar - Provide security mentoring and training to technical teams from acquired businesses, helping them adopt Amazon security practices and culture - Communicate security risks and integration status clearly to both technical and non-technical stakeholders across multiple levels of the organization - Drive continuous process improvements to how we integrate acquisitions, including evaluating and deploying security tooling at scale A day in the life Your primary focus is securing newly acquired businesses as they transition into Amazon. No two days look the same because no two acquisitions are the same. You might start your morning assessing an acquired company's cloud environment for security gaps, then jump on a call to walk their engineers through deploying monitoring tools. After lunch, you're collaborating with corporate development and business integration partners to reprioritize a security roadmap based on new findings. Later, you're drafting a risk summary for leadership or building automation to make the next integration faster. Some weeks you'll travel on-site to embed directly with a newly acquired team as their go-to security resource. Your customers are these acquired businesses — teams navigating a major transition who need a trusted guide to get secure, fast. About the team We're a small, high-impact security team that protects Amazon's customers during one of the most critical moments in a business's lifecycle — joining Amazon through acquisition. Our mission is to deliver seamless, secure customer experiences by leading security onboarding from Day 1 through full integration. We operate with high autonomy, broad ownership, and a bias toward action. Every team member wears multiple hats — you'll collaborate directly with corporate development, engineering teams from acquired companies, and security specialists across Amazon. We practice empathy and foster collaboration with teams navigating major transitions, and we prioritize practical solutions over perfection. If you thrive in ambiguity, enjoy building trust with new partners, and want to see the direct impact of your work on real businesses, you'll fit right in. Diverse Experiences Amazon Security values diverse experiences. Even if you do not meet all of the qualifications and skills listed in the job description, we encourage candidates to apply. If your career is just starting, hasn’t followed a traditional path, or includes alternative experiences, don’t let it stop you from applying. Why Amazon Security? At Amazon, security is central to maintaining customer trust and delivering delightful customer experiences. Our organization is responsible for creating and maintaining a high bar for security across all of Amazon’s products and services. We offer talented security professionals the chance to accelerate their careers with opportunities to build experience in a wide variety of areas including cloud, devices, retail, entertainment, healthcare, operations, and physical stores. Inclusive Team Culture In Amazon Security, it’s in our nature to learn and be curious. Ongoing DEI events and learning experiences inspire us to continue learning and to embrace our uniqueness. Addressing the toughest security challenges requires that we seek out and celebrate a diversity of ideas, perspectives, and voices. Training & Career Growth We’re continuously raising our performance bar as we strive to become Earth’s Best Employer. That’s why you’ll find endless knowledge-sharing, training, and other career-advancing resources here to help you develop into a better-rounded professional. Work/Life Balance We value work-life harmony. Achieving success at work should never come at the expense of sacrifices at home, which is why flexible work hours and arrangements are part of our culture. When we feel supported in the workplace and at home, there’s nothing we can’t achieve. - Bachelor's degree in computer science or equivalent - 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience - Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++ - Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP - Experience with AWS products and services - Experience implementing security solutions at the business division level or equivalent - CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+ - Experience managing or supporting Mergers and Acquisitions security integration - Experience working across multiple security domains simultaneously (e.g., cloud security, endpoint, IAM, vulnerability management, incident response) Amazon is an equal opportunity employer and does not discriminate on the basis of protec