Principal Security Engineer, SDO AppSec EMEA

Overview

In this role you lead enterprise‑wide application security across Amazon’s extensive systems, shaping the security review methodology and patterns that underpin secure development. You own risk outcomes, guide high‑risk design decisions, and set security standards for new technology adoption. You’ll drive automation and mentor engineers while partnering with senior leadership to elevate the organization’s security posture. Your work combines deep security architecture expertise with business acumen to influence product roadmaps and risk strategies.

Responsibilities

• Establish and maintain application security review methodology to cover diverse application types and risk levels
• Make security architecture decisions for critical applications and set standards for new technology adoption
• Conduct application security reviews across complex systems, identify high‑impact risks, and provide remediation guidance
• Mentor security engineers and architects, lead architecture working groups, and develop playbooks, risk frameworks, and architectural patterns
• Drive automation and AI‑powered security solutions to scale reviews, threat detection, and vulnerability management

Key requirements

• Experience in security engineering with a strong background in application security or related domains
• Experience in threat modelling, code review, and security testing
• Proven track record of delivering security solutions at scale
• Experience leading security initiatives across multiple teams and stakeholders
• Proven ability to influence senior technical leaders and build trust with security organizations

• Strategic thinking
• Mentorship and coaching
• Cross‑functional collaboration
• Threat modelling
• Code review
• Security testing

…