Security Engineer II, Differentiated Security Team (DST)

Every time Amazon acquires a new company, someone needs to make sure that business is secure from Day 1. That's us — and we're looking for a Security Engineer to join our Mergers & Acquisitions security integration team. You'll serve as the technical security lead for acquisition integrations, guiding newly acquired businesses through their security journey from deal close through full onboarding to Amazon's security services. This isn't a "monitor dashboards and write reports" role — you'll be hands-on with diverse technology environments, solving real security problems for real businesses that are brand new to Amazon. Here's what makes this role different: - You'll work across the full spectrum of security domains — cloud security, endpoint protection, identity & access management, vulnerability management, incident response readiness, and more — rather than specializing in just one area - Every acquisition is a new puzzle: different tech stacks, different threat landscapes, different business contexts. You'll never do the same thing twice - You'll be the trusted security advisor for teams that are navigating one of the biggest transitions of their careers — joining Amazon. You'll mentor them, train them, and help them understand what "good" looks like at Amazon scale - You'll partner directly with corporate development, business sponsors, and security service teams across Amazon to drive risk reduction and deliver scalable security solutions - You'll have the opportunity to shape how Amazon approaches M&A security in an era of rapidly evolving threats, including building AI-native security practices into integration workflows We're a small, high-impact team that punches well above its weight. If you want broad security exposure, high autonomy, and the chance to directly protect Amazon's customers during some of the most critical moments in a business's lifecycle, we'd love to talk. Key job responsibilities As a Security Engineer on this team, you will: - Serve as the technical security lead for acquisition integrations, driving all post-close security onboarding and risk remediation activities - Assess and secure diverse technology environments inherited through acquisitions, spanning cloud infrastructure, on-premises systems, endpoints, and identity platforms - Partner with corporate development, business sponsors, and security service teams to execute security integration strategies from deal close through full onboarding - Identify security gaps in acquired environments through threat modeling and risk analysis, then build and execute actionable remediation plans - Support onboarding of acquired business assets to Amazon's core security services, providing hands-on troubleshooting and escalation to service-owner teams as needed - Review proposed architecture and design efforts connected to security integration, ensuring they meet Amazon's security bar - Provide security mentoring and training to technical teams from acquired businesses, helping them adopt Amazon security practices and culture - Communicate security risks and integration status clearly to both technical and non-technical stakeholders across multiple levels of the organization - Drive continuous process improvements to how we integrate acquisitions, including evaluating and deploying security tooling at scale A day in the life Your primary focus is securing newly acquired businesses as they transition into Amazon. No two days look the same because no two acquisitions are the same. You might start your morning assessing an acquired company's cloud environment for security gaps, then jump on a call to walk their engineers through deploying monitoring tools. After lunch, you're collaborating with corporate development and business integration partners to reprioritize a security roadmap based on new findings. Later, you're drafting a risk summary for leadership or building automation to make the next integration faster. Some weeks you'll travel