Talent.com
Amazon Development Centre (London) Limited
Principal Security Engineer, SDO AppSec EMEAAmazon Development Centre (London) Limited • London, England, GBR
Principal Security Engineer, SDO AppSec EMEA

Principal Security Engineer, SDO AppSec EMEA

Amazon Development Centre (London) Limited • London, England, GBR
30+ days ago
Job type
  • Full-time
Job description
As a Principal Security Engineer in the Appstar organization, you lead application security reviews across complex systems, identify and advise on critical security risks, and mentor the broader security engineering team. You own security outcomes that reduce persistent risks and proactively shape organization-level security posture.

You are responsible for establishing and maintaining the enterprise-wide application security review methodology — including threat modelling philosophy, security testing standards, and remediation validation. You design security patterns and standards that serve as the foundation for secure development across all engineering organizations, with a focus on increasing automation of discoverable vulnerabilities and reducing manual security work for both builder and security teams.

You make critical architectural decisions for systems handling billions in revenue, evaluating high-risk design decisions and setting security standards for new technology adoption. You develop reusable architectural patterns that balance security requirements with business needs, and serve as the organization's risk management subject matter expert — making final determinations on high-risk issues and establishing risk acceptance processes at the VP and SVP level.

This role requires deep expertise in application security architecture, advanced threat modelling, and secure development practices, combined with strong business acumen to perform cost-benefit analyses and influence product roadmaps. You will regularly partner with VP and SVP-level leadership, lead security architecture working groups, and mentor other security engineers — driving security culture across the organization.

Key job responsibilities
- Establish and maintain application security review methodology, creating comprehensive frameworks that address various application types and risk levels used across Amazon's wide application landscape
- Make security architecture decisions for Amazon's most critical application, evaluating high-risk design decisions and establishing security standards for new technology adoption
- Execute application security reviews across complex applications and across organizations, proactively identifying critical security risks others may miss and providing actionable guidance on risk mitigation and remediation
- Mentor security engineers and architects across the organization, leading security architecture working groups and creating security review playbooks, risk assessment frameworks, and architectural patterns that become organizational standards
- Drive automation and AI-powered security solutions to scale security reviews, threat detection, and vulnerability management across the application portfolio to match the development pace of builders

BASIC QUALIFICATIONS

•Experience in security engineering, with significant experience in application security or a relevant domain
• Experience in Threat Modelling, Code Review, and Security Testing
• Proven track record of driving security solutions at scale
• Experience leading technical security initiatives across multiple teams and stakeholders
• Proven ability to influence senior technical leaders and build trust with security organizations

PREFERRED QUALIFICATIONS

• Bachelor’s degree in Computer Science, Engineering, or related field; Master's degree preferred
• Experience with AI/ML systems and their security implications and applications
• Track record of building and deploying automated security solutions in large-scale environments
• History of contributions to security automation or tooling in the broader security community
• Experience driving adoption of new security technologies across large engineering organizations


Create a job alert for this search

Principal Security Engineer, SDO AppSec EMEA • London, England, GBR

Similar jobs

Principal Security Engineer, SDO AppSec EMEA

AmazonGreater London, England, GB
Full-time

As a Principal Security Engineer in the Appstar organization, you lead application security reviews across complex systems, identify and advise on critical security risks, and mentor the broader se... Show more

 • Promoted

Security Engineering Director — Lead Secure-by-Design Platform

MonzoGreater London, England, United Kingdom
Full-time

Monzo is looking for a Security Engineering Lead to drive their secure-by-design mandate and lead a high-performing team.This role requires proven leadership in engineering organizations of 30-50 p... Show more

 • Promoted

Senior Operational Security Engineer

Crown Agents BankGreater London, England, GB
Full-time

Senior Operational Security Engineer.The Senior Operational Security Engineer owns and operates the firm's core protective and detective security controls across endpoint, network, identity and dat... Show more

 • Promoted

Lead Security Engineer — Cloud & Platform Security

EezeGreater London, England, GB
Full-time

Eeze is looking for a Lead Security Engineer to enhance their security engineering capability across cloud and on-premise environments.The role demands a leader who can embed security into engineer... Show more

 • Promoted

Principal Security Engineer

RedCloudGreater London, England, United Kingdom
Full-time

The global supply chain is broken-creating a $2 trillion inventory gap where essential consumer goods fail to reach the people who need them.Brands miss sales, distributors mismanage stock, and ret... Show more

 • Promoted

Engineering Director, Security

Visa HuntGreater London, England, United Kingdom
Full-time

The Engineering Director, Security will be a senior leader within our global Security organisation, partnering directly with the CISO and other senior engineering leaders.You will lead an organisat... Show more

 • Promoted

Senior Security Operations Engineer: Endpoints, IAM & XDR

Crown Agents Bank Ltd.Greater London, England, GB
Full-time

Senior Operational Security Engineer to own and operate core protective and detective security controls across endpoint, network, identity, and data security.The role involves managing EDR tooling,... Show more

 • Promoted

Lead Security Engineer

Wave TalentGreater London, England, GB
Full-time

This range is provided by Wave Talent.Your actual pay will be based on your skills and experience — talk with your recruiter to learn more.B2B SaaS / Procurement & Spend Control.Series A, backed by... Show more

 • Promoted

Principal Platform Security Engineer

HiscoxGreater London, England, GB
Permanent

Build a brilliant future with Hiscox.Principal Platform Security Engineer, London Market.As a senior and influential member of the London Platform Engineering Chapter, the Principal Platform Securi... Show more

 • Promoted

Principal Platform Security Engineer

Hiscox SAGreater London, England, GB
Full-time +1

Principal Platform Security EngineerApplyremote type: Hybridlocations: York: Lisbon: Londontime type: Full timeposted on: Posted Todayjob requisition id: R0019499**Job Type:**Permanen... Show more

 • Promoted

Senior App Security Engineer – Fintech, AWS & ISO 27001

PennylaneGreater London, England, GB
Full-time

Pennylane, located in Greater London, is seeking an Application Security Engineer to handle technical security matters and support ISO 27001 compliance.You will engage with product teams to integra... Show more

 • Promoted

Security Engineer

Caspian OneLondon, England, GB
Full-time

This is a fantastic opportunity to work on securing high-performance trading infrastructure, cloud platforms, and business-critical applications in a fast-paced, high-stakes environment.Implement a... Show more

 • Promoted

Platform Security Engineer (DevSecOps)

Qube Research & TechnologiesGreater London, England, GB
Full-time

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world.We are a technology- and data-driven group impl... Show more

 • Promoted

AppSec Engineer: Secure SDLC & Security Champion

AND DigitalLondon, England, GB
Full-time

A digital technology firm in London is seeking an experienced Application Security Engineer to enhance their security posture.This role involves managing core technical application security, contri... Show more

 • Promoted

Hybrid Senior Security Operations Engineer — Lead & Mentor

La FosseLondon, England, GB
Full-time

A leading recruitment company is seeking a Cyber Security Engineer to join their team in London.This role involves managing security initiatives, mentoring junior staff, and enhancing the overall s... Show more

 • Promoted

Lead Application Security Engineer

IntercomGreater London, England, GB
Full-time

Intercom is seeking a Security Engineer to enhance tier-zero security capabilities for its AI Customer Agent, Fin.Responsibilities include designing security features, conducting architecture revie... Show more

 • Promoted

Principal Engineer, Product Security

CommercetoolsGreater London, England, GB
Full-time

Real innovation starts with a strong foundation, and at commercetools, that comes from the perfect balance of our product and our people.Behind every leap forward is a collective of builders, explo... Show more

 • Promoted

Hybrid Senior Security Engineer | SC-Cleared XSIAM Expert

LHHGreater London, England, GB
Full-time

LHH in the United Kingdom is seeking a Senior Security Engineer to strengthen security monitoring, threat detection and incident response.You will design and optimize security operations across a c... Show more

 • Promoted

Principal Security Engineer

Growtoday ABGreater London, England, GB
Full-time

About the job Principal Security Engineer.Our client is a cybersecurity company that builds custody SaaS protocol for web3 apps.Think of it as a developer tool that provides secure cloud for crypto... Show more

 • Promoted

Principal Security Engineer

PipedriveGreater London, England, GB
Full-time

We are looking for a Principal Security Engineer to join Pipedrive as a technical builder responsible for engineering the security architecture of our SaaS platform, corporate operations and the to... Show more