Principal Security Engineer, SDO AppSec EMEA

Salary: £60,000 - 110,000 per year

Requirements:

• We have significant experience in security engineering, especially application security or a relevant domain.
• We have experience with threat modelling, code review, and security testing.
• We have a proven track record of driving security solutions at scale.
• We have experience leading technical security initiatives across multiple teams and stakeholders.
• We have a proven ability to influence senior technical leaders and build trust with security organizations.
• We have a bachelors degree in Computer Science, Engineering, or a related field; a masters degree is preferred.
• We have experience with AI/ML systems and their security implications and applications.
• We have a track record of building and deploying automated security solutions in large-scale environments.
• We have history of contributions to security automation or tooling in the broader security community.
• We have experience driving adoption of new security technologies across large engineering organizations.

Responsibilities:

• We establish and maintain the application security review methodology, creating comprehensive frameworks that address various application types and risk levels across our wide application landscape.
• We make security architecture decisions for our most critical applications, evaluating high-risk design decisions and establishing security standards for new technology adoption.
• We execute application security reviews across complex applications and organizations, proactively identifying critical security risks and providing actionable guidance on risk mitigation and remediation.
• We mentor security engineers and architects across our organization, leading security architecture working groups and creating security review playbooks, risk assessment frameworks, and architectural patterns that become our standards.
• We drive automation and AI-powered security solutions to scale security reviews, threat detection, and vulnerability management across our application portfolio to match the pace of our builders.
• We own security outcomes that reduce persistent risks and proactively shape our organization-level security posture.
• We develop reusable architectural patterns that balance security requirements with business needs.
• We serve as our organizations risk management subject matter expert, making final determinations on high-risk issues and establishing risk acceptance processes at the VP and SVP level.

Technologies:

• AI
• Security
• Support

More:

We are Amazons Appstar organization, where we lead application security across complex systems and critical services that handle billions in revenue. We partner closely with VP and SVP-level leadership, security engineers, and architects to strengthen our security posture, reduce manual security work through automation, and drive a strong security culture across the organization. We are committed to an inclusive workplace and equal opportunities for all candidates, and we value invention, simplification, and building secure solutions at scale.

last updated 34 week of 2026