Principal Security Engineer

Principal Security Engineer focuses on you own security outcomes that reduce persistent risks and proactively shape organization-level security posture.

What the role involves

• You own security outcomes that reduce persistent risks and proactively shape organization-level security posture.
• You develop reusable architectural patterns that balance security requirements with business needs.
• Lead security architecture working groups, and mentor other security engineers — driving security culture across the organization.
• Maintain application security review methodology, creating comprehensive frameworks that address various application types and risk levels used across Amazon's wide application lan.
• Make security architecture decisions for Amazon's most critical application, evaluating high-risk design decisions and establishing security standards for new technology adoption.
• Driving automation and AI-powered security solutions to scale security reviews, threat detection, and vulnerability management across the application portfolio to match the developme.

Skills and requirements

• Experience in Threat Modelling, Code Review, and Security Testing.
• Proven track record of driving security solutions at scale.
• Experience leading technical security initiatives across multiple teams and stakeholders.
• Proven ability to influence senior technical leaders.

Candidate fit

• technical judgement, safe working habits, careful diagnostics, and practical problem-solving

Additional role context

• Advise on critical security risks, and mentor the broader security engineering team.
• Regularly partner with VP and SVP-level leadership.