AWS Security Engineer: Threat Modeling & Pen Testing

JobCubby; Greater London; Hybrid; GBP 70,000 - 110,000; Full time

Job summary

Amazon is seeking an AppSec Security Engineer to evaluate service design and conduct deep-dive security assessments to ensure applications meet a high security bar before launch. You’ll work with senior engineers, drive remediation, and validate security requirements are met across architectures and services.

The role involves threat modelling, security reviews, and coordinating penetration testing, with guidance on secure coding, cryptography, and data protection.

Qualifications

• Bachelor's degree or above in Computer Science, Computer Engineering, or related fields.
• tExperience with web protocols, common security attacks, and remediation.
• Experience with coding/scripting in one or more languages (e.g., Python, Java, C++, etc.)

Responsibilities

• Security Reviews: Conduct design reviews for new and existing services, evaluating architecture documents and system designs for security risks.
• Threat Modelling: Identify attack vectors and security weaknesses in application architectures through structured threat modelling exercises.
• Penetration Testing: Coordinate penetration testing to validate security controls and identify exploitable vulnerabilities.
• Finding Management: Document, track, and communicate security findings with remediation guidance, and verify fixes.
• Security Guidance: Advise development teams on secure coding practices, authentication/authorization mechanisms, cryptographic implementations, and data protection strategies.
• Escalation Support: Identify and escalate high-severity issues through appropriate channels, ensuring timely remediation aligned with launch timelines.
• Documentation: Maintain clear documentation of review outcomes, security decisions, and risk assessments.
• Tool Improvements: Leverage automated tools to support reviews and improve efficiency.

Skills

Web security

Threat modelling

Penetration testing

Remediation guidance

Programming (Python/Java)

Education

Bachelor's degree in a technical field

Tools

AWS

Security frameworks

Penetration testing tools

Job description

Amazon is seeking an AppSec Security Engineer to evaluate service design and conduct deep-dive security assessments to ensure applications meet a high security bar before launch. You’ll work with senior engineers, drive remediation, and validate security requirements are met across architectures and services.

The role involves threat modelling, security reviews, and coordinating penetration testing, with guidance on secure coding, cryptography, and data protection.