AWS Security Engineer — AppSec & Threat Modelling

Amazon Web Services (AWS); Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Amazon Development Centre (London) Limited seeks an AppSec Security Engineer to evaluate service design and architecture, and perform deep-dive security assessments to ensure applications and services meet a high security bar before launch.

You will work with senior engineers to identify issues, drive remediation, and validate that security requirements are met, while advising teams on secure coding, authentication, cryptography, and data protection to support timely releases.

Qualifications

• Bachelor's degree or above in Computer Science, Computer Engineering, or related fields.
• Experience with security testing and remediation of vulnerabilities.
• Experience with coding in Python, Java, C, C++, Ruby, or PowerShell.
• Experience with security frameworks, incident response, secure software development, and related areas.
• Experience with one or more languages for scripting or automation.

Responsibilities

• Conduct design reviews for new and existing services, evaluating architecture documents and system designs for security risks.
• Identify attack vectors and security weaknesses through threat modelling exercises.
• Coordinate penetration testing to validate security controls and identify exploitable vulnerabilities.
• Document, track, and communicate security findings with remediation guidance and verification of fixes.
• Advise development teams on secure coding practices, authentication/authorization, cryptography, and data protection.
• Identify and escalate high-severity issues to ensure timely remediation aligned with launch timelines.
• Maintain clear documentation of review outcomes, security decisions, and risk assessments.
• Leverage automated tools to support reviews and improve efficiency.

Skills

Web security basics

Threat modelling

Penetration testing

Programming/scripting

Cloud security

Education

Bachelor's degree in CS/CE or related

Tools

AWS

Job description

Amazon Development Centre (London) Limited seeks an AppSec Security Engineer to evaluate service design and architecture, and perform deep-dive security assessments to ensure applications and services meet a high security bar before launch.

You will work with senior engineers to identify issues, drive remediation, and validate that security requirements are met, while advising teams on secure coding, authentication, cryptography, and data protection to support timely releases.