You'll serve as the technical security lead for acquisition integrations, guiding newly acquired businesses through their security journey from deal close through full onboarding to Amazon's security services. This isn't a "monitor dashboards and write reports" role - you'll be hands-on with diverse technology environments, solving real security problems for real businesses that are brand new to Amazon.

Here's what makes this role different:

- You'll work across the full spectrum of security domains - cloud security, endpoint protection, identity & access management, vulnerability management, incident response readiness, and more - rather than specializing in just one area

- Every acquisition is a new puzzle: different tech stacks, different threat landscapes, different business contexts. You'll never do the same thing twice

- You'll be the trusted security advisor for teams that are navigating one of the biggest transitions of their careers - joining Amazon. You'll mentor them, train them, and help them understand what "good" looks like at Amazon scale

- You'll partner directly with corporate development, business sponsors, and security service teams across Amazon to drive risk reduction and deliver scalable security solutions

- You'll have the opportunity to shape how Amazon approaches M&A security in an era of rapidly evolving threats, including building AI-native security practices into integration workflows

We're a small, high-impact team that punches well above its weight. If you want broad security exposure, high autonomy, and the chance to directly protect Amazon's customers during some of the most critical moments in a business's lifecycle, we'd love to talk.

Key job responsibilities

As a Security Engineer on this team, you will:

- Serve as the technical security lead for acquisition integrations, driving all post-close security onboarding and risk remediation activities

- Assess and secure diverse technology environments inherited through acquisitions, spanning cloud infrastructure, on-premises systems, endpoints, and identity platforms

- Partner with corporate development, business sponsors, and security service teams to execute security integration strategies from deal close through full onboarding

- Identify security gaps in acquired environments through threat modeling and risk analysis, then build and execute actionable remediation plans

- Support onboarding of acquired business assets to Amazon's core security services, providing hands-on troubleshooting and escalation to service-owner teams as needed

- Review proposed architecture and design efforts connected to security integration, ensuring they meet Amazon's security bar

- Provide security mentoring and training to technical teams from acquired businesses, helping them adopt Amazon security practices and culture

- Communicate security risks and integration status clearly to both technical and non-technical stakeholders across multiple levels of the organization

- Drive continuous process improvements to how we integrate acquisitions, including evaluating and deploying security tooling at scale

A day in the life

Your primary focus is securing newly acquired businesses as they transition into Amazon. No two days look the same because no two acquisitions are the same.

You might start your morning assessing an acquired company's cloud environment for security gaps, then jump on a call to walk their engineers through deploying monitoring tools. After lunch, you're collaborating with corporate development and business integration partners to reprioritize a security roadmap based on new findings. Later, you're drafting a risk summary for leadership or building automation to make the next integration faster.

Some weeks you'll travel on-site to embed directly with a newly acquired team as their go-to security resource. Your customers are these acquired businesses - teams navigating a major transition who need a trusted guide to get secure, fast.

BASIC QUALIFICATIONS

- Bachelor's degree in computer science or equivalent

- 3+ years of any combination of the following: threat modeling experience, secure coding, identity management and authentication, software development, cryptography, system administration and network security experience

- Experience in scripting, programming, or security code reviewing in a common language, such as Python, Java, or C++

- Knowledge of networking protocols such as HTTP(S), DNS, and TCP/IP

PREFERRED QUALIFICATIONS

- Experience with AWS products and services

- Experience implementing security solutions at the business division level or equivalent

- CCSP (Certified Cloud Security Professional) or CEH (Certified Ethical Hacker) or CFR (CyberSec First Responder) or Cloud+ or CySA+ (CompTIA Cybersecurity Analyst) or GCED (GIAC Certified Enterprise Defender) or GICSP (Global Industrial Cyber Security Professional) or PenTest+

- Experience converting insights into strategy and communicating complex ideas clearly and logically in written communication

- Experience managing or supporting Mergers and Acquisitions security integration

- Experience working across multiple security domains simultaneously (e.g., cloud security, endpoint, IAM, vulnerability management, incident response)