Security Engineer II, StoreSec Application Security

Amazon • Austin, TX

2d • $159,300 - $202,400 • Onsite

About The Position

Amazon Healthcare Security's (HealthSec) AI team is hiring a Security Engineer II to secure GenAI applications and enable secure AI adoption across Amazon Health Services (AHS). You will work at the intersection of AI for Security and Security for AI—securing AHS GenAI applications in production, hardening the AI-SDLC for AHS builders, and building AI-powered security tooling that scales protection across healthcare verticals including application security, network and infrastructure security, detections and monitoring, and incident response. Working closely with AHS AI application builders and product teams, you will ensure that AI systems handling healthcare data meet HIPAA compliance and Amazon's security bar while improving security review process efficiency for both builders and peer healthcare security teams.

Requirements

• 3+ years of programming in Python, Ruby, Go, Swift, Java, .Net, C++ or similar object oriented language experience
• Bachelor's degree in a STEM field (Science, Technology, Engineering, Mathematics), or experience in IT Security
• Experience with AI/ML technologies
• Experience applying threat modeling or other risk identification techniques or equivalent
• Knowledge of common AI security risks (prompt injection, data poisoning, model extraction, insecure tool use)

Nice To Haves

• Experience with programming languages such as Python, Java, C++
• Experience with AWS or cloud technologies
• 2+ years of any combination of: AI security, threat modeling, secure coding, identity management and authentication, software development, cryptography, or application security
• Experience with security testing of LLM-based applications or performing security activities across the SDLC (security design review, threat modeling, secure code review, security testing)
• Familiarity with HIPAA compliance requirements for healthcare data

Responsibilities

• Define and drive implementation of proactive security controls for AHS AI applications including GenAI chatbots, agentic systems, and LLM-powered tools
• Develop and implement security controls for the AI-SDLC, ensuring AHS builders build secure AI applications by default
• Assess and drive mitigation of AI-specific security risks including prompt injection, model abuse, data exfiltration, and unauthorized tool invocation at scale
• Build and/or drive adoption of AI-powered security tooling (e.g., automated threat modeling, code scanning, security test generation) to scale security across AHS
• Drive adoption of AI security guardrails, testing frameworks, and monitoring across AHS GenAI applications
• Collaborate with AHS builder teams to integrate security guidance into AI development workflows, reducing late-stage security findings
• Develop and maintain security documentation including AI threat models, risk assessments, and secure AI development guidelines
• Support security incident investigations related to AI systems, including prompt injection attacks and model misuse

Benefits

• sign-on payments
• restricted stock units (RSUs)
• health insurance (medical, dental, vision, prescription, Basic Life & AD&D insurance and option for Supplemental life plans, EAP, Mental Health Support, Medical Advice Line, Flexible Spending Accounts, Adoption and Surrogacy Reimbursement coverage)
• 401(k) matching
• paid time off
• parental leave

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level